Becton, Dickinson and Company (BD)

Becton, Dickinson and Company is a medical device manufacturer whose vulnerability footprint centers on infusion systems, medication delivery platforms, and hospital information management products such as the Alaris family, Performa, and FacSchorus. The exposure recurs through authentication and access-control weaknesses—including hard-coded credentials, missing authentication for critical functions, and improper protection of alternate hardware interfaces—that are structural concerns in networked medical devices where access control boundaries and credential management demand careful design. A meaningful share of disclosures reach serious severity, reflecting the safety-critical role of these systems in hospital environments. Defenders should prioritize securing network access to these devices, rotating any hard-coded credentials per vendor guidance, and reviewing administrative interfaces for authentication enforcement, particularly across firmware updates and system integrations. Current exploitation activity and severity distribution are shown alongside this summary.