ICSMA-22-151-02

icsaUScisa_csaf_ot

BD Synapsys

view advisory published 2022-05-31

Successful exploitation of this vulnerability could allow an attacker to access, modify, or delete sensitive information. This includes electronic protected health information (ePHI), protected health information (PHI), and personally identifiable information (PII).

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2022-30277USmedium5.7—
BD Synapsys™, versions 4.20, 4.20 SR1, and 4.30, contain an insufficient session expiration vulnerability. If exploited, threat actors may be able to access, modify or delete sensi…
02

references

External citations — patches, advisories, analysis.

03

remediations (1)

  • FixedBD Synapsys

    Additionally, BD recommends the following compensating controls for users working with the impacted versions of BD Synapsys:

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan