Is CVE-2022-43557 actively exploited?

No active exploitation of CVE-2022-43557 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2022-43557 be exploited remotely?

No. CVE-2022-43557 requires physical access to exploit.

What is the CVSS score of CVE-2022-43557?

CVE-2022-43557 has a CVSS score of 5.3 (MEDIUM).

HOME VULNERABILITIESCVE-2022-43557

MEDIUM

CVE-2022-43557

CWE-1299Published: December 5, 2022· Updated: Jun 17, 2026

5.3

CVSS v3.1

Official Description

The BD BodyGuard™ infusion pumps specified allow for access through the RS-232 (serial) port interface. If exploited, threat actors with physical access, specialized equipment and knowledge may be able to configure or disable the pump. No electronic protected health information (ePHI), protected health information (PHI) or personally identifiable information (PII) is stored in the pump.

NVD Source

Technical Analysis

CVE-2022-43557 requires local access, meaning attackers must already have a foothold on the target system.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 5.3.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorPhysical

Attack ComplexityHigh

Privileges Req.None

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityLow

IntegrityLow

AvailabilityHigh

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Affected Vendors & Products

bd14 product(s)

bodyguard 999-603 firmwarebodyguard 999-603bodyguard duo 999-903 firmwarebodyguard duo 999-903bodyguard epidural 999-683 firmwarebodyguard epidural 999-683bodyguard pain manager 999-803 firmwarebodyguard pain manager 999-803bodyguard t 999-103 firmwarebodyguard t 999-103bodyguard 323 colorvision firmwarebodyguard 323 colorvision+2

Source: NVD CPE · 14 total CPE entries