Vulnerability · Published Feb 11, 2022 · Assigned by BD
CVE-2022-22766BD Pyxis Products - Hardcoded Credentials
High 7.0
In plain English
A high-severity hard-coded credentials in BD Pyxis Anesthesia Station 4000 from Becton Dickinson (BD). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).
Official description
Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to the underlying file system and could potentially exploit application files for information that could be used to decrypt application credentials or gain access to electronic protected health information (ePHI) or other sensitive information.
Affected products (as reported)
Weakness: CWE-798 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H