Comparison Overview

BioGeneticsRx

VS

Celesio AG

BioGeneticsRx

Tampa, US
Last Update: 2025-05-04 (UTC)
Between 800 and 849

At BioGeneticsRx we want positive outcomes for patients + physicians. Using state-of-the-art equipment, our laboratory can process more than 100,000 tests per month. To maximize efficiency, our laboratory is located in Memphis, Tennessee within close proximity to the FedEx hub. Furthermore, Memphis is in the Kahaba Medicare District, which provides favorable reimbursement of most of our PGx tests. State-of-the-art pharmacogeomics testing The ONLY lab with real time analysis tool – CQ Live Platinum quality lab with illumnia DNA testing at the molecular level CLIA and PTan certifications Fast turnaround time Patient receives a QR code card to gain access to CQ Live for PGx results updated real time for life Medicare and Medicaid Approved Most HMO's and PPO's Approved State-of-the-art Medication Reconciliation Tool The CQ Live Medication Reconciliation Tool is the first-ever interactive tool that incorporates drug-to-gene and drug-to-drug interaction. The tool allows physicians to provide personalized care through the CQLive Portal that enhances the existing genetic reports currently on the market. The live portal takes into consideration lifestyle factors, concomitant therapies and genetic markers to ensure patients have the best therapeutic outcome. Every Other PGx Lab only offers a one time Static report. Contact Us Today Toll Free 800-222-5676

NAICS: 3254
NAICS Definition: Pharmaceutical and Medicine Manufacturing
Employees: 51-200
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Celesio AG

Stockholmer Platz 1
Last Update: 2025-05-04 (UTC)
Between 750 and 799

On 12 September 2017, Celesio AG has officially announced its renaming to McKesson Europe AG, based on the shareholders’ decision at the Annual General Meeting 2017. Documents of Celesio AG remain documents of McKesson Europe AG. More information can be found in the press release"Renaming: Celesio AG becomes McKesson Europe AG": http://www.mckesson.eu/mck-en/news-press/releases-mckessoneurope/renaming--celesio-ag-becomes-mckesson-europe-ag/29600 Please refer to our new company site: http://www.linkedin.com/company/mckesson-europe Imprint: McKesson Europe AG Stockholmer Platz 1 70173 Stuttgart (Germany) Telephone: +49 711 5001-00 Telefax: +49 711 5001-1260 [email protected] http://www.facebook.com/mckessoneurope http://twitter.com/mckessoneurope

NAICS: 3254
NAICS Definition: Pharmaceutical and Medicine Manufacturing
Employees: 10,001+
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/defaultcompany.jpeg
BioGeneticsRx
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/celesio-ag.jpeg
Celesio AG
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
BioGeneticsRx
100%
Compliance Rate
0/4 Standards Verified
Celesio AG
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Pharmaceutical Manufacturing Industry Average (This Year)

No incidents recorded for BioGeneticsRx in 2025.

Incidents vs Pharmaceutical Manufacturing Industry Average (This Year)

No incidents recorded for Celesio AG in 2025.

Incident History — BioGeneticsRx (X = Date, Y = Severity)

BioGeneticsRx cyber incidents detection timeline including parent company and subsidiaries

Incident History — Celesio AG (X = Date, Y = Severity)

Celesio AG cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/defaultcompany.jpeg
BioGeneticsRx
Incidents

No Incident

https://images.rankiteo.com/companyimages/celesio-ag.jpeg
Celesio AG
Incidents

No Incident

FAQ

BioGeneticsRx company demonstrates a stronger AI Cybersecurity Score compared to Celesio AG company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Celesio AG company has disclosed a higher number of cyber incidents compared to BioGeneticsRx company.

In the current year, Celesio AG company and BioGeneticsRx company have not reported any cyber incidents.

Neither Celesio AG company nor BioGeneticsRx company has reported experiencing a ransomware attack publicly.

Neither Celesio AG company nor BioGeneticsRx company has reported experiencing a data breach publicly.

Neither Celesio AG company nor BioGeneticsRx company has reported experiencing targeted cyberattacks publicly.

Neither BioGeneticsRx company nor Celesio AG company has reported experiencing or disclosing vulnerabilities publicly.

Neither BioGeneticsRx nor Celesio AG holds any compliance certifications.

Neither company holds any compliance certifications.

Neither BioGeneticsRx company nor Celesio AG company has publicly disclosed detailed information about the number of their subsidiaries.

Neither BioGeneticsRx company nor Celesio AG company has publicly disclosed the exact number of their employees.

Neither BioGeneticsRx nor Celesio AG holds SOC 2 Type 1 certification.

Neither BioGeneticsRx nor Celesio AG holds SOC 2 Type 2 certification.

Neither BioGeneticsRx nor Celesio AG holds ISO 27001 certification.

Neither BioGeneticsRx nor Celesio AG holds PCI DSS certification.

Neither BioGeneticsRx nor Celesio AG holds HIPAA certification.

Neither BioGeneticsRx nor Celesio AG holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Deck Mate 1 executes firmware directly from an external EEPROM without verifying authenticity or integrity. An attacker with physical access can replace or reflash the EEPROM to run arbitrary code that persists across reboots. Because this design predates modern secure-boot or signed-update mechanisms, affected systems should be physically protected or retired from service. The vendor has not indicated that firmware updates are available for this legacy model.

Risk Information
cvss4
Base: 7.0
Severity: LOW
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Deck Mate 2 lacks a verified secure-boot chain and runtime integrity validation for its controller and display modules. Without cryptographic boot verification, an attacker with physical access can modify or replace the bootloader, kernel, or filesystem and gain persistent code execution on reboot. This weakness allows long-term firmware tampering that survives power cycles. The vendor indicates that more recent firmware updates strengthen update-chain integrity and disable physical update ports to mitigate related attack avenues.

Risk Information
cvss4
Base: 7.0
Severity: LOW
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Deck Mate 2's firmware update mechanism accepts packages without cryptographic signature verification, encrypts them with a single hard-coded AES key shared across devices, and uses a truncated HMAC for integrity validation. Attackers with access to the update interface - typically via the unit's USB update port - can craft or modify firmware packages to execute arbitrary code as root, allowing persistent compromise of the device's integrity and deck randomization process. Physical or on-premises access remains the most likely attack path, though network-exposed or telemetry-enabled deployments could theoretically allow remote exploitation if misconfigured. The vendor confirmed that firmware updates have been issued to correct these update-chain weaknesses and that USB update access has been disabled on affected units.

Risk Information
cvss4
Base: 7.0
Severity: LOW
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All (API modules), Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS bcprov-lts8on on All (API modules) allows Excessive Allocation. This vulnerability is associated with program files core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCFB.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeGCM.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/fips/SHA256NativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeEngine.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCBC.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCTR.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCFB.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeGCM.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeEngine.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCBC.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeGCMSIV.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCCM.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCTR.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA256NativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA224NativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA3NativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHAKENativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA512NativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA384NativeDigest.Java. This issue affects Bouncy Castle for Java FIPS: from 2.1.0 through 2.1.1; Bouncy Castle for Java LTS: from 2.73.0 through 2.73.7.

Risk Information
cvss4
Base: 5.9
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:N/R:U/V:C/RE:M/U:Amber
Description

Wasmtime is a runtime for WebAssembly. In versions from 38.0.0 to before 38.0.3, the implementation of component-model related host-to-wasm trampolines in Wasmtime contained a bug where it's possible to carefully craft a component, which when called in a specific way, would crash the host with a segfault or assert failure. Wasmtime 38.0.3 has been released and is patched to fix this issue. There are no workarounds.

Risk Information
cvss4
Base: 2.1
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X