CVE-2022-22767

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Specific BD Pyxis™ products were installed with default credentials and may presently still operate with these credentials. There may be scenarios where BD Pyxis™ products are installed with the same default local operating system credentials or domain-joined server(s) credentials that may be shared across product types. If exploited, threat actors may be able to gain privileged access to the underlying file system and could potentially exploit or gain access to ePHI or other sensitive information.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

VendorProductVersions
Becton Dickinson (BD)BD Pyxis™ Anesthesia ES StationAll versions
Becton Dickinson (BD)BD Pyxis™ CIISafeAll versions
Becton Dickinson (BD)BD Pyxis™ LogisticsAll versions
Becton Dickinson (BD)BD Pyxis™ MedBankAll versions
Becton Dickinson (BD)BD Pyxis™ MedStation™ 4000All versions
Becton Dickinson (BD)BD Pyxis™ MedStation™ ESAll versions
Becton Dickinson (BD)BD Pyxis™ MedStation™ ES ServerAll versions
Becton Dickinson (BD)BD Pyxis™ ParAssistAll versions
Becton Dickinson (BD)BD Pyxis™ Rapid RxAll versions
Becton Dickinson (BD)BD Pyxis™ StockStationAll versions
Becton Dickinson (BD)BD Pyxis™ SupplyCenterAll versions
Becton Dickinson (BD)BD Pyxis™ SupplyRollerAll versions
Becton Dickinson (BD)BD Pyxis™ SupplyStation™All versions
Becton Dickinson (BD)BD Pyxis™ SupplyStation™ ECAll versions
Becton Dickinson (BD)BD Pyxis™ SupplyStation™ RF auxiliaryAll versions
Becton Dickinson (BD)BD Rowa™ Pouch Packaging SystemsAll versions

References

Timeline

Published
Jun 2, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-227699.0The Web server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, TIBCO EBX Add-ons, TIBCO EBX Add-ons, TIBCO EBX Add-ons, CVE-2022-22777.5Improper Input Validation vulnerability exists in the Hitachi Energy MicroSCADA X SYS600's ICCP stack during the ICCP communication establisCVE-2022-227709.8The Web Server component of TIBCO Software Inc.'s TIBCO AuditSafe contains an easily exploitable vulnerability that allows an unauthenticateCVE-2022-227718.8The Server component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperRepCVE-2022-227727.5The cfsend, cfrecv, and CyberResp components of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for UNIX and TIBCO ManagedCVE-2022-227735.4The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server - Community Edition, TIBCO JasperRepoCVE-2022-227749.1The DOM XML parser and SAX XML parser components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, TIBCO Managed File TraCVE-2022-227755.4The Workspace client component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric cCVE-2022-227765.4The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable vulnerabiliCVE-2022-227776.1The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable Reflected CCVE-2022-227788.8The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains an easily exploitable vulnerabCVE-2022-227793.7The Keybase Clients for macOS and Windows before version 5.9.0 fails to properly remove exploded messages initiated by a user. This can occu
CVE-2022-22767: High severity, CVSS 8.8 | Vulnix