BD Totalys MultiProcessor
view advisory published 2022-10-04
Successful exploitation of this vulnerability could allow an attacker to access, modify, or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI), and personally identifiable information (PII).
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-40263US | high7.8OT elevated | — | ||
BD Totalys MultiProcessor, versions 1.70 and earlier, contain hardcoded credentials. If exploited, threat actors may be able to access, modify or delete sensitive information, incl… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSMA-22-277-01 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (1)
- FixedBD Totalys MultiProcessor
According to BD, this vulnerability is scheduled to be remediated in the BD Totalys MultiProcessor version 1.71 software release expected in fourth quarter 2022.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan