What is CVE-2022-22767?

CVE-2022-22767 is a high-severity vulnerability in Bd Pyxis_anesthesia_station_es, classified under Not Using Password Aging. CVSS score: 8.8/10. Published 2022-06-02.

How severe is CVE-2022-22767?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Bd Pyxis_anesthesia_station_es

CVE-2022-22767

Specific BD Pyxis™ products were installed with default credentials and may presently still operate with these credentials. There may be scenarios where BD Pyxis™ products are installed with the same default local operating system credenti…

EPSS: 0.004 (33.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Bd Pyxis_anesthesia_station_es
Bd Pyxis_anesthesia_station_es_firmware
Bd Pyxis_ciisafe
Bd Pyxis_ciisafe_firmware
Bd Pyxis_logistics
Bd Pyxis_logistics_firmware
Bd Pyxis_medbank
Bd Pyxis_medbank_firmware
Bd Pyxis_medstation_4000
Bd Pyxis_medstation_4000_firmware

Weakness classification (CWE)

CWE-262 — Not Using Password Aging
CWE-522 — Insufficiently Protected Credentials

References

cybersecurity@bd.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2022-22767?: CVE-2022-22767 is a high-severity vulnerability in Bd Pyxis_anesthesia_station_es, classified under Not Using Password Aging. CVSS score: 8.8/10. Published 2022-06-02.
How severe is CVE-2022-22767?: High severity. CVSS v3 base score is 8.8 out of 10.