CVE-2024-10476CWE-1392

Default credentials are used in the above listed BD Diagnostic Solutions products

High · published December 17, 2024

CVSS v3.1
8.0
EPSS
0%
Percentile
13.7
In the wild
Unconfirmed
What it is

Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as protected health information (PHI) and personally identifiable information (PII). Exploitation of this vulnerability may allow an attacker to shut down or otherwise impact the availability of the system. Note: BD Synapsys™ Informatics

Solution is only in scope of

this vulnerability when

installed on a NUC server. BD Synapsys™

Informatics Solution installed

on a customer-provided virtual machine or on the BD Kiestra™ SCU hardware is

not in scope.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00236 · 13.7th percentile
Weakness
CWE-1392 · Use of Default Credentials
Published
2024-12-17T15:16Z
EPSS history
Timeline
  • 17 DEC 15:16Z
    Default credentials are used in the above listed BD Diagnostic Solutions products
    cvelistv5