Vulnerability in Bd Pyxis Anesthesia Station Es
CVE-2022-22767
Specific BD Pyxis™ products were installed with default credentials and may presently still operate with these credentials. There may be scenarios where BD Pyxis™ products are installed with the same default local operating system credentials or domain-joined server(s) credentials that may be shared across product types. If exploited, threat actors may be able to gain privileged access to the underlying file system and could potentially exploit or gain access to ePHI or other sensitive information.
EPSS: 0.004 (34.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
Weakness classification (CWE)
References
- cybersecurity@bd.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2022-22767?
- CVE-2022-22767 is a high-severity vulnerability in Bd Pyxis Anesthesia Station Es, classified under Not Using Password Aging. CVSS score: 8.8/10. Published 2022-06-02.
- How severe is CVE-2022-22767?
- High severity. CVSS v3 base score is 8.8 out of 10.