CVE-2022-22766

Katalog CVE

CVSS 5.5 · Medium EPSS 0,23%

Kerentanan Use of Hard-coded Credentials pada bd pyxis anesthesia station es firmware, bd pyxis anesthesia station 4000 firmware +22 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to the underlying file system and could potentially exploit application files for information that could be used to decrypt application credentials or gain access to electronic protected health information (ePHI) or other sensitive information.

Rincian

Terbit di NVD

11 Februari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-798: Use of Hard-coded Credentials

EPSS (30 hari)

0,23% peluang dieksploitasi; lebih tinggi dari 12,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cybersecurity.bd.com/bulletins-and-patches/bd-pyxis-products---hardcoded-credentials advisory vendor
• https://www.cisa.gov/uscert/ics/advisories/icsma-22-062-01 advisory pihak ketiga · pemerintah AS