Skip to main content
← All vulnerabilities
CVE-2022-22766

BD Pyxis Products - Hardcoded Credentials

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub

Summary

Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to the underlying file system and could potentially exploit application files for information that could be used to decrypt application credentials or gain access to electronic protected health information (ePHI) or other sensitive information.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Becton Dickinson (BD) BD Pyxis Anesthesia Station ES

    All versions

  • Becton Dickinson (BD) BD Pyxis Anesthesia Station 4000

    All versions

  • Becton Dickinson (BD) BD Pyxis CATO

    All versions

  • Becton Dickinson (BD) BD Pyxis CIISafe

    All versions

  • Becton Dickinson (BD) BD Pyxis Inventory Connect

    All versions

  • Becton Dickinson (BD) BD Pyxis IV Prep

    All versions

  • Becton Dickinson (BD) BD Pyxis JITrBUD

    All versions

  • Becton Dickinson (BD) BD Pyxis KanBan RF

    All versions

  • Becton Dickinson (BD) BD Pyxis Logistics

    All versions

  • Becton Dickinson (BD) BD Pyxis Med Link Family

    All versions

  • Becton Dickinson (BD) BD Pyxis MedBank

    All versions

  • Becton Dickinson (BD) BD Pyxis MedStation 4000

    All versions

  • Becton Dickinson (BD) BD Pyxis MedStation ES

    All versions

  • Becton Dickinson (BD) BD Pyxis MedStation ES Server

    All versions

  • Becton Dickinson (BD) BD Pyxis ParAssist

    All versions

  • Becton Dickinson (BD) BD Pyxis PharmoPack

    All versions

  • Becton Dickinson (BD) BD Pyxis ProcedureStation (including EC)

    All versions

  • Becton Dickinson (BD) BD Pyxis Rapid Rx

    All versions

  • Becton Dickinson (BD) BD Pyxis StockStation

    All versions

  • Becton Dickinson (BD) BD Pyxis SupplyCenter

    All versions

  • Becton Dickinson (BD) BD Pyxis SupplyRoller

    All versions

  • Becton Dickinson (BD) BD Pyxis SupplyStation (including RF, EC, CP)

    All versions

  • Becton Dickinson (BD) BD Pyxis Track and Deliver

    All versions

  • Becton Dickinson (BD) BD Rowa Pouch Packaging Systems

    All versions

References 2

cybersecurity.bd.com

cisa.gov