HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2022-22767

CVSS 8.8v3.1pub. 2022-06-02upd. 2024-11-21

Specific BD Pyxis™ products were installed with default credentials and may presently still operate with these credentials. There may be scenarios where BD Pyxis™ products are installed with the same default local operating system credentials or domain-joined server(s) credentials that may be shared across product types. If exploited, threat actors may be able to gain privileged access to the underlying file system and could potentially exploit or gain access to ePHI or other sensitive information.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Bd Pyxis Anesthesia Station Es

    HW
    Bd
    all versions

  • Bd Pyxis Anesthesia Station Es Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Ciisafe

    HW
    Bd
    all versions

  • Bd Pyxis Ciisafe Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Logistics

    HW
    Bd
    all versions

  • Bd Pyxis Logistics Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Medbank

    HW
    Bd
    all versions

  • Bd Pyxis Medbank Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Medstation 4000

    HW
    Bd
    all versions

  • Bd Pyxis Medstation 4000 Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Medstation Es

    HW
    Bd
    all versions

  • Bd Pyxis Medstation Es Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Medstation Es Server

    HW
    Bd
    all versions

  • Bd Pyxis Medstation Es Server Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Parassist

    HW
    Bd
    all versions

  • Bd Pyxis Parassist Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Rapid Rx

    HW
    Bd
    all versions

  • Bd Pyxis Rapid Rx Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Stockstation

    HW
    Bd
    all versions

  • Bd Pyxis Stockstation Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Supplycenter

    HW
    Bd
    all versions

  • Bd Pyxis Supplycenter Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Supplyroller

    HW
    Bd
    all versions

  • Bd Pyxis Supplyroller Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Supplystation

    HW
    Bd
    all versions

  • Bd Pyxis Supplystation Ec

    HW
    Bd
    all versions

  • Bd Pyxis Supplystation Ec Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Supplystation Firmware

    OS
    Bd
    all versions

  • Bd Pyxis Supplystation Rf Auxiliary

    HW
    Bd
    all versions

  • Bd Pyxis Supplystation Rf Auxiliary Firmware

    OS
    Bd
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2022-22766HIGH7.0same product

Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain ...

CVE-2020-10598MEDIUM6.1same product

In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia (PAS) ES System v1.6.1, a restricted desktop envi...

CVE-2019-10959CRITICAL10.0PL ✓same vendor

BD Alaris Gateway Workstation — upload złośliwego firmware bez ograniczeń

CVE-2018-14786CRITICAL9.4PL ✓same vendor

Auth Bypass w pompach strzykawkowych BD Alaris — nieautoryzowany zdalny dostęp

CVE-2017-6022CRITICAL9.8PL ✓same vendor

Hard-coded password w BD PerformA i KLA Journal Service — dostęp do bazy BD Kiestra