CVE-2022-22765
Summary
| CVE | CVE-2022-22765 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-02-12 03:15:00 UTC |
| Updated | 2022-05-11 14:38:00 UTC |
| Description | BD Viper LT system, versions 2.0 and later, contains hardcoded credentials. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII). BD Viper LT system versions 4.0 and later utilize Microsoft Windows 10 and have additional Operating System hardening configurations which increase the attack complexity required to exploit this vulnerability. |
Risk And Classification
Problem Types: CWE-798
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Bd | Viper Lt System | - | All | All | All |
| Operating System | Bd | Viper Lt System Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| BD Viper LT<sup>™</sup> system – Hardcoded Credentials | CONFIRM | cybersecurity.bd.com | |
| BD Viper LT | CISA | MISC | www.cisa.gov | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.