Vulnerability · Published Nov 4, 2022 · Assigned by BD
CVE-2022-40263BD Totalys MultiProcessor - Hardcoded Credentials
Medium 6.6
In plain English
A medium-severity hard-coded credentials in BD Totalys MultiProcessor from Becton Dickson (BD). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).
Official description
BD Totalys MultiProcessor, versions 1.70 and earlier, contain hardcoded credentials. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII). Customers using BD Totalys MultiProcessor version 1.70 with Microsoft Windows 10 have additional operating system hardening configurations which increase the attack complexity required to exploit this vulnerability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Becton Dickson (BD) | BD Totalys MultiProcessor | 1.70 – through 1.70 |
Weakness: CWE-798 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L