CVE:CVE-2018-14786
CNNVD:CNNVD-201808-759
BD Alaris GS等都是美国BD公司的不同系列的医用注射泵产品。
多款BD产品中存在授权问题漏洞，该漏洞源于软件未能对需认证的功能执行身份验证。远程攻击者可利用该漏洞未授权访问Alaris注射泵，影响该注射泵的运行。以下产品和版本受到影响：BD Alaris GS 2.3.6及之前版本；BD Alaris GH 2.3.6及之前版本；BD Alaris CC 2.3.6及之前版本；BD Alaris TIVA 2.3.6及之前版本。
solution:Upgrade bd alaris_gs_firmware to a higher version than 2.3.6,and avoid the version (,2.3.6]; Upgrade bd alaris_gh_firmware to a higher version than 2.3.6,and avoid the version (,2.3.6]; Upgrade bd alaris_cc_firmware to a higher version than 2.3.6,and avoid the version (,2.3.6]; Upgrade bd alaris_tiva_firmware to a higher version than 2.3.6,and avoid the version (,2.3.6]