Vulnerability · Published Jun 1, 2022 · Assigned by BD
CVE-2022-30277BD Synapsys™ – Insufficient Session Expiration
Medium 5.7
In plain English
A medium-severity security flaw in BD Synapsys™ from Becton Dickinson (BD). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).
Severity (CVSS 3.1)5.7Medium
Exploit odds (30 days)0.2%top 85.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
BD Synapsys™, versions 4.20, 4.20 SR1, and 4.30, contain an insufficient session expiration vulnerability. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII).
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Becton Dickinson (BD) | BD Synapsys™ | 4.20 – through 4.30 |
Weakness: CWE-613 · Vector: CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N