CVE-2022-22766
lowPriorität · verfolgen · 22OT-Risiko · erhöhtEPSS 0.002 · 13. PerzentilEUUSEPSS · bewertet 2026-10-27
Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to the underlying file system and could potentially exploit application files for information that could be used to decrypt application credentials or gain access to electronic protected health information (ePHI) or other sensitive information.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenBD Pyxis Anesthesia Station 4000cisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- BehobenBD Pyxis Anesthesia Station EScisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- BehobenBD Pyxis CATOcisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- BehobenBD Pyxis CIISafecisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- BehobenBD Pyxis IV Prepcisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- BehobenBD Pyxis Inventory Connectcisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- BehobenBD Pyxis JITrBUDcisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- BehobenBD Pyxis KanBan RFcisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- BehobenBD Pyxis Logisticscisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- BehobenBD Pyxis Med Link Familycisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- BehobenBD Pyxis MedBankcisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- BehobenBD Pyxis MedStation 4000cisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- BehobenBD Pyxis MedStation EScisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- BehobenBD Pyxis MedStation ES Servercisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- BehobenBD Pyxis ParAssistcisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- BehobenBD Pyxis PharmoPackcisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- BehobenBD Pyxis ProcedureStation (including EC)cisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- BehobenBD Pyxis Rapid Rxcisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- BehobenBD Pyxis StockStationcisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- BehobenBD Pyxis SupplyCentercisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- BehobenBD Pyxis SupplyRollercisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- BehobenBD Pyxis SupplyStation (including RF, EC, CP)cisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- BehobenBD Pyxis Track and Delivercisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- BehobenBD Rowa Pouch Packaging Systemscisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–high · 2.1–7
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (96)
Betroffene Produkte und Versionsbereiche.
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSMA-22-062-01BD Pyxis2022-03-03icsa · cisa_csaf_otUS
Successful exploitation of this vulnerability could allow an attacker to gain access to electronic protected health information (ePHI) or other sensitive information.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (9)
Externe Belege — Patches, Meldungen, Analysen.
- https://cybersecurity.bd.com/bulletins-and-patches/bd-pyxis-products---hardcoded-credentialscnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2022-22766cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsma-22-062-01cnnvd
- https://www.cisa.gov/uscert/ics/advisories/icsma-22-062-01cnnvd
- https://www.cybersecurity-help.cz/vdb/SB2022030405cnnvd
- https://cybersecurity.bd.com/bulletins-and-patches/bd-pyxis-products---hardcoded-credentialsenisa_euvd
- https://www.cisa.gov/uscert/ics/advisories/icsma-22-062-01enisa_euvd
- https://cybersecurity.bd.com/bulletins-and-patches/bd-pyxis-products---hardcoded-credentialsVendor Advisorynvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan