CVE-2024-10476 - CVE House
Back to Database
Status published High CVE-2024-10476

Default credentials are used in the above listed BD Diagnostic...

Vulnerability Description

Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as protected health information (PHI) and personally identifiable information (PII). Exploitation of this vulnerability may allow an attacker to shut down or otherwise impact the availability of the system. Note: BD Synapsys™ Informatics Solution is only in scope of this vulnerability when installed on a NUC server. BD Synapsys™ Informatics Solution installed on a customer-provided virtual machine or on the BD Kiestra™ SCU hardware is not in scope.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-10476

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Becton Dickinson & Co

View all reports →

Affected Software

BD BACTEC™ Blood Culture System, BD COR™ System, BD EpiCenter™ Microbiology Data Management System, BD MAX™ System, BD Phoenix™ M50 Automated Microbiology System, BD Synapsys™ Informatics Solution
Vulnerable Versions:
0

Timeline

Official Publish: December 17th, 2024
Last Modified: December 17th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.