CVE-2022-22766
Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to the underlying file system and could potentially exploit application files for information that could be used to decrypt application credentials or gain access to electronic protected health information (ePHI) or other sensitive information.
Published:Feb 11, 2022
Last Modified:Nov 21, 2024
EPS:Feb 11, 2022
EPSS Score:0.00049
CVSS Score:7
Affected Products
Vendor
Product
Action
Vendor
Bd
Product
Pyxis Anesthesia Station 4000
Bd
Pyxis Anesthesia Station 4000
Vendor
Bd
Product
Pyxis Anesthesia Station 4000 Firmware
Bd
Pyxis Anesthesia Station 4000 Firmware
Vendor
Bd
Product
Pyxis Anesthesia Station Es
Bd
Pyxis Anesthesia Station Es
Vendor
Bd
Product
Pyxis Anesthesia Station Es Firmware
Bd
Pyxis Anesthesia Station Es Firmware
Vendor
Bd
Product
Pyxis Cato
Bd
Pyxis Cato
Vendor
Bd
Product
Pyxis Cato Firmware
Bd
Pyxis Cato Firmware
Vendor
Bd
Product
Pyxis Ciisafe
Bd
Pyxis Ciisafe
Vendor
Bd
Product
Pyxis Ciisafe Firmware
Bd
Pyxis Ciisafe Firmware
Vendor
Bd
Product
Pyxis Inventory Connect
Bd
Pyxis Inventory Connect
Vendor
Bd
Product
Pyxis Inventory Connect Firmware
Bd
Pyxis Inventory Connect Firmware
Vendor
Bd
Product
Pyxis Iv Prep
Bd
Pyxis Iv Prep
Vendor
Bd
Product
Pyxis Iv Prep Firmware
Bd
Pyxis Iv Prep Firmware
Vendor
Bd
Product
Pyxis Jitrbud
Bd
Pyxis Jitrbud
Vendor
Bd
Product
Pyxis Jitrbud Firmware
Bd
Pyxis Jitrbud Firmware
Vendor
Bd
Product
Pyxis Kanban Rf
Bd
Pyxis Kanban Rf
Vendor
Bd
Product
Pyxis Kanban Rf Firmware
Bd
Pyxis Kanban Rf Firmware
Vendor
Bd
Product
Pyxis Logistics
Bd
Pyxis Logistics
Vendor
Bd
Product
Pyxis Logistics Firmware
Bd
Pyxis Logistics Firmware
Vendor
Bd
Product
Pyxis Med Link Family
Bd
Pyxis Med Link Family
Vendor
Bd
Product
Pyxis Med Link Family Firmware
Bd
Pyxis Med Link Family Firmware
Vendor
Bd
Product
Pyxis Medbank
Bd
Pyxis Medbank
Vendor
Bd
Product
Pyxis Medbank Firmware
Bd
Pyxis Medbank Firmware
Vendor
Bd
Product
Pyxis Medstation 4000
Bd
Pyxis Medstation 4000
Vendor
Bd
Product
Pyxis Medstation 4000 Firmware
Bd
Pyxis Medstation 4000 Firmware
Vendor
Bd
Product
Pyxis Medstation Es
Bd
Pyxis Medstation Es
Vendor
Bd
Product
Pyxis Medstation Es Firmware
Bd
Pyxis Medstation Es Firmware
Vendor
Bd
Product
Pyxis Medstation Es Server
Bd
Pyxis Medstation Es Server
Vendor
Bd
Product
Pyxis Medstation Es Server Firmware
Bd
Pyxis Medstation Es Server Firmware
Vendor
Bd
Product
Pyxis Parassist
Bd
Pyxis Parassist
Vendor
Bd
Product
Pyxis Parassist Firmware
Bd
Pyxis Parassist Firmware
Vendor
Bd
Product
Pyxis Pharmopack
Bd
Pyxis Pharmopack
Vendor
Bd
Product
Pyxis Pharmopack Firmware
Bd
Pyxis Pharmopack Firmware
Vendor
Bd
Product
Pyxis Procedurestation
Bd
Pyxis Procedurestation
Vendor
Bd
Product
Pyxis Procedurestation Firmware
Bd
Pyxis Procedurestation Firmware
Vendor
Bd
Product
Pyxis Rapid Rx
Bd
Pyxis Rapid Rx
Vendor
Bd
Product
Pyxis Rapid Rx Firmware
Bd
Pyxis Rapid Rx Firmware
Vendor
Bd
Product
Pyxis Stockstation
Bd
Pyxis Stockstation
Vendor
Bd
Product
Pyxis Stockstation Firmware
Bd
Pyxis Stockstation Firmware
Vendor
Bd
Product
Pyxis Supplycenter
Bd
Pyxis Supplycenter
Vendor
Bd
Product
Pyxis Supplycenter Firmware
Bd
Pyxis Supplycenter Firmware
Vendor
Bd
Product
Pyxis Supplyroller
Bd
Pyxis Supplyroller
Vendor
Bd
Product
Pyxis Supplyroller Firmware
Bd
Pyxis Supplyroller Firmware
Vendor
Bd
Product
Pyxis Supplystation
Bd
Pyxis Supplystation
Vendor
Bd
Product
Pyxis Supplystation Firmware
Bd
Pyxis Supplystation Firmware
Vendor
Bd
Product
Pyxis Track And Deliver
Bd
Pyxis Track And Deliver
Vendor
Bd
Product
Pyxis Track And Deliver Firmware
Bd
Pyxis Track And Deliver Firmware
Vendor
Bd
Product
Rowa Pouch Packaging Systems
Bd
Rowa Pouch Packaging Systems
Vendor
Bd
Product
Rowa Pouch Packaging Systems Firmware
Bd
Rowa Pouch Packaging Systems Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
