Hardcoded credentials

2014-10-1901:55:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

0.4%

JSON

CareFusion Pyxis SupplyStation 8.1 with hardware test tool 1.0.16 and earlier has a hardcoded database password, which makes it easier for local users to gain privileges by leveraging cabinet access.

CPENameOperatorVersion
pyxis_supplystationeq8.1

CPE	Name	Operator	Version
	pyxis_supplystation	eq	8.1

References

ics-cert.us-cert.gov/advisories/ICSA-14-288-01