CVE-2016-8375

CVE-2016-8375 describes a vulnerability in Becton, Dickinson and Company (BD) Alaris 8015 Point of Care (PC) units (versions 9.5 and prior, and 9.7) and 8000 PC units, where an attacker with physical access can extract unencrypted wireless network authentication credentials and other sensitive technical data from the device's internal flash memory. This medium-severity vulnerability (CVSS 4.9) requires physical access, specialized tools for data extraction, and has a high attack complexity, making exploitation in a healthcare setting less likely to go unnoticed. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in the KEV catalog, though it has received some community discussion and media coverage.