CVE-2022-22766
lowpriority · track · 22OT risk · elevatedEPSS 0.002 · 13 %ileEUUSEPSS · scored 2026-10-27
Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to the underlying file system and could potentially exploit application files for information that could be used to decrypt application credentials or gain access to electronic protected health information (ePHI) or other sensitive information.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedBD Pyxis Anesthesia Station 4000cisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- FixedBD Pyxis Anesthesia Station EScisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- FixedBD Pyxis CATOcisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- FixedBD Pyxis CIISafecisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- FixedBD Pyxis IV Prepcisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- FixedBD Pyxis Inventory Connectcisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- FixedBD Pyxis JITrBUDcisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- FixedBD Pyxis KanBan RFcisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- FixedBD Pyxis Logisticscisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- FixedBD Pyxis Med Link Familycisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- FixedBD Pyxis MedBankcisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- FixedBD Pyxis MedStation 4000cisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- FixedBD Pyxis MedStation EScisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- FixedBD Pyxis MedStation ES Servercisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- FixedBD Pyxis ParAssistcisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- FixedBD Pyxis PharmoPackcisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- FixedBD Pyxis ProcedureStation (including EC)cisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- FixedBD Pyxis Rapid Rxcisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- FixedBD Pyxis StockStationcisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- FixedBD Pyxis SupplyCentercisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- FixedBD Pyxis SupplyRollercisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- FixedBD Pyxis SupplyStation (including RF, EC, CP)cisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- FixedBD Pyxis Track and Delivercisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
- FixedBD Rowa Pouch Packaging Systemscisa_csaf_ot
Additionally, BD recommends the following compensating controls for users of BD Pyxis products that utilize the hard-coded credentials:
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–high · 2.1–7
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (96)
Products and version ranges known to be affected.
advisories (1)
Vendor and ecosystem advisories describing this.
- ICSMA-22-062-01BD Pyxis2022-03-03icsa · cisa_csaf_otUS
Successful exploitation of this vulnerability could allow an attacker to gain access to electronic protected health information (ePHI) or other sensitive information.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (9)
External citations — patches, advisories, analysis.
- https://cybersecurity.bd.com/bulletins-and-patches/bd-pyxis-products---hardcoded-credentialscnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2022-22766cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsma-22-062-01cnnvd
- https://www.cisa.gov/uscert/ics/advisories/icsma-22-062-01cnnvd
- https://www.cybersecurity-help.cz/vdb/SB2022030405cnnvd
- https://cybersecurity.bd.com/bulletins-and-patches/bd-pyxis-products---hardcoded-credentialsenisa_euvd
- https://www.cisa.gov/uscert/ics/advisories/icsma-22-062-01enisa_euvd
- https://cybersecurity.bd.com/bulletins-and-patches/bd-pyxis-products---hardcoded-credentialsVendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan