CVE-2020-25165

BD Alaris PC Unit, Model 8015, Versions 9.33.1 and earlier and BD Alaris Systems Manager, Versions 4.33 and earlier The affected products are vulnerable to a network session authentication vulnerability within the authentication process between specified versions of the BD Alaris PC Unit and the BD Alaris Systems Manager. If exploited, an attacker could perform a denial-of-service attack on the BD Alaris PC Unit by modifying the configuration headers of data in transit. A denial-of-service attack could lead to a drop in the wireless capability of the BD Alaris PC Unit, resulting in manual operation of the PC Unit.

• CWE-287

• https://us-cert.cisa.gov/ics/advisories/icsma-20-317-01Third Party Advisory, US Government Resource
• https://us-cert.cisa.gov/ics/advisories/icsma-20-317-01Third Party Advisory, US Government Resource

Published

Nov 13, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-2516Vulnerability in the Core RDBMS component of Oracle Database…2.4
• CVE-2020-25160Improper access controls in the B. Braun Melsungen AG SpaceC…6.3
• CVE-2020-25161The WADashboard component of WebAccess/SCADA Versions 9.0 an…8.8
• CVE-2020-25162A XPath injection vulnerability in the B. Braun Melsungen AG…7.5
• CVE-2020-25163A remote attacker with write access to PI ProcessBook files …7.3
• CVE-2020-25164A vulnerability in the B. Braun Melsungen AG SpaceCom Versio…7.5
• CVE-2020-25166An improper verification of the cryptographic signature of f…7.1
• CVE-2020-25167OSIsoft PI Vision 2020 versions prior to 3.5.0 could disclos…6.5
• CVE-2020-25168Hard-coded credentials in the B. Braun Melsungen AG SpaceCom…3.3
• CVE-2020-25169The affected Reolink P2P products do not sufficiently protec…7.5
• CVE-2020-2517Vulnerability in the Database Gateway for ODBC component of …3.3
• CVE-2020-25170An Excel Macro Injection vulnerability exists in the export …7.8