Vulnerability in Bd Pyxis Anesthesia Station Es

CVE-2022-22767

Specific BD Pyxis™ products were installed with default credentials and may presently still operate with these credentials. There may be scenarios where BD Pyxis™ products are installed with the same default local operating system credentials or domain-joined server(s) credentials that may be shared across product types. If exploited, threat actors may be able to gain privileged access to the underlying file system and could potentially exploit or gain access to ePHI or other sensitive information.

EPSS: 0.004 (34.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2022-22767?
CVE-2022-22767 is a high-severity vulnerability in Bd Pyxis Anesthesia Station Es, classified under Not Using Password Aging. CVSS score: 8.8/10. Published 2022-06-02.
How severe is CVE-2022-22767?
High severity. CVSS v3 base score is 8.8 out of 10.