Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2022-43557

BD BodyGuard™ Pumps – RS-232 Interface Vulnerability

Medium5.3EPSS 0.23%
Published
Updated
Reserved
Assigned by
BD

Description

The BD BodyGuard™ infusion pumps specified allow for access through the RS-232 (serial) port interface. If exploited, threat actors with physical access, specialized equipment and knowledge may be able to configure or disable the pump. No electronic protected health information (ePHI), protected health information (PHI) or personally identifiable information (PII) is stored in the pump.

Timeline

  1. ID reserved

    By BD

  2. · 46 days later

    Published

  3. · 2 years later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2022-43557, by who scored it
Scored byCVSSScoreVector
BDCNA (assigner)3.1Medium5.3CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
NVDNVD · Modified3.1Medium5.3CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
EPSS (exploitation in 30 days)
0.23% · top 87% of all CVEs (7 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.3.

Weakness

Affected products

  • Becton, Dickinson and Company (BD) · BodyGuard™ Pump

    • affected BD BodyGuard™
    • affected CME BodyGuard™ 323 (2nd Edition)
    • affected CME BodyGuard™ 323 Color Vision (2nd Edition)
    • affected CME BodyGuard™ 323 Color Vision (3rd Edition)
    • affected CME BodyGuard™ Twins (2nd Edition)

What to do

Workaround: BD recommends the following mitigations and compensating controls to reduce risk associated with this vulnerability: • Ensure physical access controls are in place and only authorized end-users have access to BD BodyGuard™ pumps. • Ensure that only BD-approved equipment is connected to the RS-232 interface of the affected pumps. • Ensure that no equipment is connected to the RS-232 interface when the affected pumps are delivering infusions. • Protect connected computer systems with BodyComm™ software with standard security measures.

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2022-43557 badge
[![CVE-2022-43557](https://trackcve.app/badge/CVE-2022-43557.svg)](https://trackcve.app/cve/CVE-2022-43557)

Record last updated .