CVE-2022-47376CWE-257

The Alaris Infusion Central software, versions 1.1 to 1.3.2, may contain a recoverable password after the installation

High · published June 13, 2023

CVSS v3.1
7.3
EPSS
0%
Percentile
5.1
In the wild
Unconfirmed
What it is

The Alaris Infusion Central software, versions 1.1 to 1.3.2, may contain a recoverable password after the installation. No patient health data is stored in the database, although some site installations may choose to store personal data.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.1th percentile
Weakness
CWE-257 · Storing Passwords in a Recoverable Format
Published
2023-06-13T00:00Z
EPSS history
Timeline
  • 13 JUN 00:00Z
    The Alaris Infusion Central software, versions 1.1 to 1.3.2, may contain a recoverable password after the installation
    cvelistv5