CVE-2022-22765

Katalog CVE

CVSS 7.8 · High EPSS 0,23%

Kerentanan Use of Hard-coded Credentials pada bd viper lt system firmware. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

BD Viper LT system, versions 2.0 and later, contains hardcoded credentials. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII). BD Viper LT system versions 4.0 and later utilize Microsoft Windows 10 and have additional Operating System hardening configurations which increase the attack complexity required to exploit this vulnerability.

Rincian

Terbit di NVD

12 Februari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-798: Use of Hard-coded Credentials

EPSS (30 hari)

0,23% peluang dieksploitasi; lebih tinggi dari 12,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cybersecurity.bd.com/bulletins-and-patches/bd-viper-lt-system-%E2%80%93-hardcoded-credentials advisory vendor
• https://www.cisa.gov/uscert/ics/advisories/icsma-22-062-02 advisory pihak ketiga · pemerintah AS