CVE-2022-22766

The CVE-2022-22766 issue affects BD Pyxis medical dispensing devices and related systems. Root cause: use of hard-coded credentials enabling potential access to the device file system and sensitive data (ePHI). Affected products include a wide range of BD Pyxis components (Anesthesia Station ES/4...

CVE-2022-22767

BD Pyxis products are affected by CVE-2022-22767 due to default credentials across multiple BD Pyxis lines (e.g., ES Anesthesia Station, CIISafe, Logistics, MedBank, MedStation variants, ParAssist, Rapid Rx, StockStation, SupplyCenter/Roller/Station/EC, and Rowa packaging systems). The root cause...