CVE-2022-22765

BD Viper LT System - Hardcoded Credentials

State
Published
Severity
8.0 High
Published
Feb 12, 2022
Updated
Sep 17, 2024
Reserved
Jan 7, 2022

Read the record on cve.org

Description

BD Viper LT system, versions 2.0 and later, contains hardcoded credentials. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII). BD Viper LT system versions 4.0 and later utilize Microsoft Windows 10 and have additional Operating System hardening configurations which increase the attack complexity required to exploit this vulnerability.

Scores

CVSSScoreVectorSource
3.18.0 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:LBD

Weaknesses

  • CWE-798 Use of Hard-coded Credentials

Affected Products

ProductVersions
BD Viper LT SystemBecton Dickinson (BD)
  • next of 2.0 to before unspecifiedAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.