CVE-2022-22766

🗓️ 11 Feb 2022 18:12:07Reported by BDType

Hardcoded credentials in BD Pyxis products may allow file system access and ePHI breac

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2022-22766	12 Feb 202204:00	–	attackerkb
Circl	CVE-2022-22766	11 Feb 202222:28	–	circl
CNNVD	BD Pyxis 信任管理问题漏洞	11 Feb 202200:00	–	cnnvd
Cvelist	CVE-2022-22766 BD Pyxis Products - Hardcoded Credentials	11 Feb 202218:12	–	cvelist
EUVD	EUVD-2022-27909	3 Oct 202520:07	–	euvd
ICS	BD Pyxis	3 Mar 202200:00	–	ics
NVD	CVE-2022-22766	11 Feb 202219:15	–	nvd
Prion	Hardcoded credentials	11 Feb 202219:15	–	prion
Trellix	Connected Healthcare: A Cybersecurity Battlefield We Must Win	6 Jun 202200:00	–	trellix
Trellix	Connected Healthcare: A Cybersecurity Battlefield We Must Win	6 Jun 202200:00	–	trellix

NVD

Node

bd pyxis_anesthesia_station_es_firmware

AND

bd pyxis_anesthesia_station_esMatch-

Node

bd pyxis_anesthesia_station_4000_firmware

AND

bd pyxis_anesthesia_station_4000Match-

Node

bd pyxis_cato_firmware

AND

bd pyxis_catoMatch-

Node

bd pyxis_ciisafe_firmware

AND

bd pyxis_ciisafeMatch-

Node

bd pyxis_inventory_connect_firmware

AND

bd pyxis_inventory_connectMatch-

Node

bd pyxis_iv_prep_firmware

AND

bd pyxis_iv_prepMatch-

Node

bd pyxis_jitrbud_firmware

AND

bd pyxis_jitrbudMatch-

Node

bd pyxis_kanban_rf_firmware

AND

bd pyxis_kanban_rfMatch-

Node

bd pyxis_logistics_firmware

AND

bd pyxis_logisticsMatch-

Node

bd pyxis_med_link_family_firmware

AND

bd pyxis_med_link_familyMatch-

Node

bd pyxis_medbank_firmware

AND

bd pyxis_medbankMatch-

Node

bd pyxis_medstation_4000_firmware

AND

bd pyxis_medstation_4000Match-

Node

bd pyxis_medstation_es_firmware

AND

bd pyxis_medstation_esMatch-

Node

bd pyxis_medstation_es_server_firmware

AND

bd pyxis_medstation_es_serverMatch-

Node

bd pyxis_parassist_firmware

AND

bd pyxis_parassistMatch-

Node

bd pyxis_pharmopack_firmware

AND

bd pyxis_pharmopackMatch-

Node

bd pyxis_procedurestation_firmware

AND

bd pyxis_procedurestationMatch-

Node

bd pyxis_rapid_rx_firmware

AND

bd pyxis_rapid_rxMatch-

Node

bd pyxis_stockstation_firmware

AND

bd pyxis_stockstationMatch-

Node

bd pyxis_supplycenter_firmware

AND

bd pyxis_supplycenterMatch-

Node

bd pyxis_supplyroller_firmware

AND

bd pyxis_supplyrollerMatch-

Node

bd pyxis_supplystation_firmware

AND

bd pyxis_supplystationMatch-

Node

bd pyxis_track_and_deliver_firmware

AND

bd pyxis_track_and_deliverMatch-

Node

bd rowa_pouch_packaging_systems_firmware

AND

bd rowa_pouch_packaging_systemsMatch-

[
  {
    "product": "BD Pyxis Anesthesia Station ES",
    "vendor": "Becton Dickinson (BD)",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "BD Pyxis Anesthesia Station 4000",
    "vendor": "Becton Dickinson (BD)",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "BD Pyxis CATO",
    "vendor": "Becton Dickinson (BD)",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "BD Pyxis CIISafe",
    "vendor": "Becton Dickinson (BD)",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "BD Pyxis Inventory Connect",
    "vendor": "Becton Dickinson (BD)",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "BD Pyxis IV Prep",
    "vendor": "Becton Dickinson (BD)",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "BD Pyxis JITrBUD",
    "vendor": "Becton Dickinson (BD)",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "BD Pyxis KanBan RF",
    "vendor": "Becton Dickinson (BD)",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "BD Pyxis Logistics",
    "vendor": "Becton Dickinson (BD)",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "BD Pyxis Med Link Family",
    "vendor": "Becton Dickinson (BD)",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "BD Pyxis MedBank",
    "vendor": "Becton Dickinson (BD)",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "BD Pyxis MedStation 4000",
    "vendor": "Becton Dickinson (BD)",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "BD Pyxis MedStation ES",
    "vendor": "Becton Dickinson (BD)",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "BD Pyxis MedStation ES Server",
    "vendor": "Becton Dickinson (BD)",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "BD Pyxis ParAssist",
    "vendor": "Becton Dickinson (BD)",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "BD Pyxis PharmoPack",
    "vendor": "Becton Dickinson (BD)",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "BD Pyxis ProcedureStation (including EC)",
    "vendor": "Becton Dickinson (BD)",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "BD Pyxis Rapid Rx",
    "vendor": "Becton Dickinson (BD)",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "BD Pyxis StockStation",
    "vendor": "Becton Dickinson (BD)",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "BD Pyxis SupplyCenter",
    "vendor": "Becton Dickinson (BD)",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "BD Pyxis SupplyRoller",
    "vendor": "Becton Dickinson (BD)",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "BD Pyxis SupplyStation (including RF, EC, CP)",
    "vendor": "Becton Dickinson (BD)",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "BD Pyxis Track and Deliver",
    "vendor": "Becton Dickinson (BD)",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "BD Rowa Pouch Packaging Systems",
    "vendor": "Becton Dickinson (BD)",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsma-22-062-01
cybersecurity	www.cybersecurity.bd.com/bulletins-and-patches/bd-pyxis-products---hardcoded-credentials

21 Nov 2024 06:47Current

6.1Medium risk

Vulners AI Score6.1

CVSS 22.1

CVSS 3.15.5 - 7

EPSS0.00049

CWE-798