BD communicates with our customers about cybersecurity vulnerabilities to enable healthcare providers to manage potential risks through awareness and guidance.
BD is aware that Microsoft XML Core Services version 4.0 is no longer supported by Microsoft. Microsoft announced the end of support for Microsoft XML Core Services version 4.0, effective April 12, 2014. As a result, Microsoft no longer provides security updates for this software. This third-party software component is not specific to BD or our products. BD is providing this update to let customers know which BD products could be affected.
Please note: This third-party component is not used in BD Alaris™ products sold in the U.S.
The list below identifies impacted BD products:
These offerings provide operational log reporting and do not directly affect the functioning of individual BD Alaris™ infusion pumps or BD Alaris™ Systems Managers.
As noted above, this third-party component is not used in BD Alaris™ products sold in the U.S. This list does not indicate the patch or device status. It may be updated if more products are identified. Please check back periodically for updates.
BD is currently planning to update the in-scope BD products that utilize this third-party component. BD does not have a confirmed schedule at this time. Please refer to the Bulletins and Patches page for all approved product security patching notifications.
Additionally, BD recommends the following compensating controls for customers using BD products that utilize the affected software: