Vulnerability · Published Feb 12, 2022 · Assigned by BD
CVE-2022-22765BD Viper LT System - Hardcoded Credentials
High 8.0
In plain English
A high-severity hard-coded credentials in BD Viper LT System from Becton Dickinson (BD). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).
Official description
BD Viper LT system, versions 2.0 and later, contains hardcoded credentials. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII). BD Viper LT system versions 4.0 and later utilize Microsoft Windows 10 and have additional Operating System hardening configurations which increase the attack complexity required to exploit this vulnerability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Becton Dickinson (BD) | BD Viper LT System | next of 2.0 – before unspecified |
Weakness: CWE-798 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L