CVE-2022-22766

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to the underlying file system and could potentially exploit application files for information that could be used to decrypt application credentials or gain access to electronic protected health information (ePHI) or other sensitive information.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-798

Affected software

VendorProductVersions
Becton Dickinson (BD)BD Pyxis Anesthesia Station ESAll
Becton Dickinson (BD)BD Pyxis Anesthesia Station 4000All
Becton Dickinson (BD)BD Pyxis CATOAll
Becton Dickinson (BD)BD Pyxis CIISafeAll
Becton Dickinson (BD)BD Pyxis Inventory ConnectAll
Becton Dickinson (BD)BD Pyxis IV PrepAll
Becton Dickinson (BD)BD Pyxis JITrBUDAll
Becton Dickinson (BD)BD Pyxis KanBan RFAll
Becton Dickinson (BD)BD Pyxis LogisticsAll
Becton Dickinson (BD)BD Pyxis Med Link FamilyAll
Becton Dickinson (BD)BD Pyxis MedBankAll
Becton Dickinson (BD)BD Pyxis MedStation 4000All
Becton Dickinson (BD)BD Pyxis MedStation ESAll
Becton Dickinson (BD)BD Pyxis MedStation ES ServerAll
Becton Dickinson (BD)BD Pyxis ParAssistAll
Becton Dickinson (BD)BD Pyxis PharmoPackAll
Becton Dickinson (BD)BD Pyxis ProcedureStation (including EC)All
Becton Dickinson (BD)BD Pyxis Rapid RxAll
Becton Dickinson (BD)BD Pyxis StockStationAll
Becton Dickinson (BD)BD Pyxis SupplyCenterAll
Becton Dickinson (BD)BD Pyxis SupplyRollerAll
Becton Dickinson (BD)BD Pyxis SupplyStation (including RF, EC, CP)All
Becton Dickinson (BD)BD Pyxis Track and DeliverAll
Becton Dickinson (BD)BD Rowa Pouch Packaging SystemsAll

References

Timeline

Published
Feb 11, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-227678.8Specific BD Pyxis™ products were installed with default credentials and may presently still operate with these credentials. There may be sceCVE-2022-227699.0The Web server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, TIBCO EBX Add-ons, TIBCO EBX Add-ons, TIBCO EBX Add-ons, CVE-2022-22777.5Improper Input Validation vulnerability exists in the Hitachi Energy MicroSCADA X SYS600's ICCP stack during the ICCP communication establisCVE-2022-227709.8The Web Server component of TIBCO Software Inc.'s TIBCO AuditSafe contains an easily exploitable vulnerability that allows an unauthenticateCVE-2022-227718.8The Server component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperRepCVE-2022-227727.5The cfsend, cfrecv, and CyberResp components of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX and TIBCO ManagedCVE-2022-227735.4The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperRepoCVE-2022-227749.1The DOM XML parser and SAX XML parser components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, TIBCO Managed File TraCVE-2022-227755.4The Workspace client component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric cCVE-2022-227765.4The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable vulnerabiliCVE-2022-227776.1The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable Reflected CCVE-2022-227788.8The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains an easily exploitable vulnerab
CVE-2022-22766: Medium severity, CVSS 5.5 | Vulnix