CVE-2018-10593

A vulnerability in DB Manager version 3.0.1.0 and previous and PerformA version 3.0.0.0 and previous allows an authorized user with access to a privileged account on a BD Kiestra system Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor to issue SQL commands, which may result in data...

CVE-2018-10593

CVE-2018-10593 affects BD Kiestra DB Manager (v3.0.1.0 and earlier) and PerformA (v3.0.0.0 and earlier). An authorized user with a privileged BD Kiestra account can issue SQL commands, potentially leading to data corruption on Kiestra TLA, WCA, and InoqulA+ systems. The connected ICS-CERT advisor...

BD Kiestra and InoquIA Systems (Update A)

1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION : Exploitable from adjacent network Vendor : Becton, Dickinson and Company BD Equipment : BD Kiestra and InoqulA systems Vulnerabilities : Product UI does not Warn User of Unsafe Actions 2. UPDATE INFORMATION This updated advisory is a follow-up to the...

Hardcoded credentials

A hard-coded password issue was discovered in Becton, Dickinson and Company BD PerformA, Version 2.0.14.0 and prior versions, and KLA Journal Service, Version 1.0.51 and prior versions. They use hard-coded passwords to access the BD Kiestra Database, which could be leveraged to compromise the...

CVE-2017-6022

A hard-coded password issue was discovered in Becton, Dickinson and Company BD PerformA, Version 2.0.14.0 and prior versions, and KLA Journal Service, Version 1.0.51 and prior versions. They use hard-coded passwords to access the BD Kiestra Database, which could be leveraged to compromise the...

CVE-2017-6022

CVE-2017-6022 affects BD PerformA (v2.0.14.0 and earlier) and KLA Journal Service (v1.0.51 and earlier); hard-coded credentials allow remote access to the BD Kiestra Database, risking confidentiality of PHI/PII. Exploitation is remote-feasible; no public exploits are cited. Remediation: apply upd...

CVE-2017-6022

A hard-coded password issue was discovered in Becton, Dickinson and Company BD PerformA, Version 2.0.14.0 and prior versions, and KLA Journal Service, Version 1.0.51 and prior versions. They use hard-coded passwords to access the BD Kiestra Database, which could be leveraged to compromise the...

BD PerformA and KLA Journal Service Information Disclosure Vulnerability

BD PerformA and KLA Journal Service are both BD products for healthcare applications. The former is a set of applications for system monitoring; the latter is a set of applications for incremental backup. A security vulnerability exists in BD PerformA version 2.0.14.0 and earlier and KLA Journal...