BD Pyxis Products - Hardcoded Credentials

7 CVSS

Vulnerability Description

Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to the underlying file system and could potentially exploit application files for information that could be used to decrypt application credentials or gain access to electronic protected health information (ePHI) or other sensitive information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-22766

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Becton Dickinson (BD)

View All →

CVE-2022-30277

BD Synapsys™ – Insufficient Session Expiration

Medium 5.7

CVE-2022-22767

BD Pyxis™ Products – Default Credentials

High 8.8

CVE-2022-22765

BD Viper LT System - Hardcoded Credentials

High 8

Affected Vendor

Becton Dickinson (BD)

View all reports →

Affected Software

BD Pyxis Anesthesia Station ES, BD Pyxis Anesthesia Station 4000, BD Pyxis CATO, BD Pyxis CIISafe, BD Pyxis Inventory Connect, BD Pyxis IV Prep, BD Pyxis JITrBUD, BD Pyxis KanBan RF, BD Pyxis Logistics, BD Pyxis Med Link Family, BD Pyxis MedBank, BD Pyxis MedStation 4000, BD Pyxis MedStation ES, BD Pyxis MedStation ES Server, BD Pyxis ParAssist, BD Pyxis PharmoPack, BD Pyxis ProcedureStation (including EC), BD Pyxis Rapid Rx, BD Pyxis StockStation, BD Pyxis SupplyCenter, BD Pyxis SupplyRoller, BD Pyxis SupplyStation (including RF, EC, CP), BD Pyxis Track and Deliver, BD Rowa Pouch Packaging Systems

Vulnerable Versions:

All