HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2022-22766

CVSS 7.0v3.1pub. 2022-02-11upd. 2024-11-21

Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to the underlying file system and could potentially exploit application files for information that could be used to decrypt application credentials or gain access to electronic protected health information (ePHI) or other sensitive information.

CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Bd Pyxis Anesthesia Station 4000

    HW
    Bd
    all versions

  • Bd Pyxis Anesthesia Station 4000 Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Anesthesia Station Es

    HW
    Bd
    all versions

  • Bd Pyxis Anesthesia Station Es Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Cato

    HW
    Bd
    all versions

  • Bd Pyxis Cato Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Ciisafe

    HW
    Bd
    all versions

  • Bd Pyxis Ciisafe Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Inventory Connect

    HW
    Bd
    all versions

  • Bd Pyxis Inventory Connect Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Iv Prep

    HW
    Bd
    all versions

  • Bd Pyxis Iv Prep Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Jitrbud

    HW
    Bd
    all versions

  • Bd Pyxis Jitrbud Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Kanban Rf

    HW
    Bd
    all versions

  • Bd Pyxis Kanban Rf Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Logistics

    HW
    Bd
    all versions

  • Bd Pyxis Logistics Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Medbank

    HW
    Bd
    all versions

  • Bd Pyxis Medbank Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Med Link Family

    HW
    Bd
    all versions

  • Bd Pyxis Med Link Family Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Medstation 4000

    HW
    Bd
    all versions

  • Bd Pyxis Medstation 4000 Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Medstation Es

    HW
    Bd
    all versions

  • Bd Pyxis Medstation Es Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Medstation Es Server

    HW
    Bd
    all versions

  • Bd Pyxis Medstation Es Server Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Parassist

    HW
    Bd
    all versions

  • Bd Pyxis Parassist Firmware

    OS
    Bd
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2022-22767HIGH8.8same product

Specific BD Pyxis™ products were installed with default credentials and may presently still operate with these...

CVE-2020-10598MEDIUM6.1same product

In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia (PAS) ES System v1.6.1, a restricted desktop envi...

CVE-2019-10959CRITICAL10.0PL ✓same vendor

BD Alaris Gateway Workstation — upload złośliwego firmware bez ograniczeń

CVE-2018-14786CRITICAL9.4PL ✓same vendor

Auth Bypass w pompach strzykawkowych BD Alaris — nieautoryzowany zdalny dostęp

CVE-2017-6022CRITICAL9.8PL ✓same vendor

Hard-coded password w BD PerformA i KLA Journal Service — dostęp do bazy BD Kiestra