CVE-2018-10595

State: Published
Severity: Not scored
Published: May 24, 2018
Updated: Sep 17, 2024
Reserved: May 1, 2018

Description

A vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor) to issue SQL commands, which may result in loss or corruption of data.

Scores

The record has no CVSS score.

Weaknesses

CWE-356 Product UI does not warn user of unsafe actions CWE-356

Affected Products

Product	Versions
Kiestra and InoqulA systemsBecton, Dickinson and Company	Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor using ReadA Overview version 1.1.0.2 and previous.Affected

References

https://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletin-bd-kiestra-tla-bd-kiestra-wca-bd-inoqula
https://ics-cert.us-cert.gov/advisories/ICSMA-18-142-01

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.