CVE-2022-22766CWE-798

BD Pyxis Products - Hardcoded Credentials

High · published February 11, 2022

CVSS v3.1
7.0
EPSS
0%
Percentile
12.8
In the wild
Unconfirmed
What it is

Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to the underlying file system and could potentially exploit application files for information that could be used to decrypt application credentials or gain access to electronic protected health information (ePHI) or other sensitive information.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00228 · 12.8th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2022-02-11T18:12Z
EPSS history
Timeline
  • 11 FEB 18:12Z
    BD Pyxis Products - Hardcoded Credentials
    cvelistv5