high7.0
CVE-2022-22766
Hardcoded credentials are used in specific BD Pyxis products.
Impact
Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to the underlying file system and could potentially exploit application files for information that could be used to decrypt application credentials or gain access to electronic protected health information (ePHI) or other sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bd | Pyxis Anesthesia Station Es Firmware | All versions |
| Bd | Pyxis Anesthesia Station 4000 Firmware | All versions |
| Bd | Pyxis Cato Firmware | All versions |
| Bd | Pyxis Ciisafe Firmware | All versions |
| Bd | Pyxis Inventory Connect Firmware | All versions |
| Bd | Pyxis Iv Prep Firmware | All versions |
| Bd | Pyxis Jitrbud Firmware | All versions |
| Bd | Pyxis Kanban Rf Firmware | All versions |
| Bd | Pyxis Logistics Firmware | All versions |
| Bd | Pyxis Med Link Family Firmware | All versions |
| Bd | Pyxis Medbank Firmware | All versions |
| Bd | Pyxis Medstation 4000 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://cybersecurity.bd.com/bulletins-and-patches/bd-pyxis-products---hardcoded-credentials
- https://www.cisa.gov/uscert/ics/advisories/icsma-22-062-01
- https://cybersecurity.bd.com/bulletins-and-patches/bd-pyxis-products---hardcoded-credentials
- https://www.cisa.gov/uscert/ics/advisories/icsma-22-062-01