CVE-2022-40263CWE-798

BD Totalys MultiProcessor - Hardcoded Credentials

Medium · published November 4, 2022

CVSS v3.1
6.6
EPSS
0%
Percentile
5.7
In the wild
Unconfirmed
What it is

BD Totalys MultiProcessor, versions 1.70 and earlier, contain hardcoded credentials. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII). Customers using BD Totalys MultiProcessor version 1.70 with Microsoft Windows 10 have additional operating system hardening configurations which increase the attack complexity required to exploit this vulnerability.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00167 · 5.7th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2022-11-04T18:58Z
EPSS history
Timeline
  • 04 NOV 18:58Z
    BD Totalys MultiProcessor - Hardcoded Credentials
    cvelistv5