CVE-2022-22765CWE-798

BD Viper LT System - Hardcoded Credentials

High · published February 12, 2022

CVSS v3.1
8.0
EPSS
0%
Percentile
13.2
In the wild
Unconfirmed
What it is

BD Viper LT system, versions 2.0 and later, contains hardcoded credentials. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII). BD Viper LT system versions 4.0 and later utilize Microsoft Windows 10 and have additional Operating System hardening configurations which increase the attack complexity required to exploit this vulnerability.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00231 · 13.2th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2022-02-12T02:30Z
EPSS history
Timeline
  • 12 FEB 02:30Z
    BD Viper LT System - Hardcoded Credentials
    cvelistv5