Back to CVE records
High 7.0HealthcarePublished Feb 11, 2022
CVE-2022-22766BD Pyxis Products - Hardcoded Credentials
Updated under an hour ago ()
Does this affect you?
It affects Becton Dickinson (BD) BD Pyxis Anesthesia Station ES and 47 other products. Add what you run to find out whether that includes you.
EPSS puts the chance of exploitation in the next 30 days at 0.23%, higher than 13% of scored CVEs.
Do this next
Start free and add your stack
Free account, 1 product
Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to the underlying file system and could potentially exploit application files for information that could be used to decrypt application credentials or gain access to electronic protected health information (ePHI) or other sensitive information.
- CVSS
- 7.0 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-798
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- 0.23% (percentile 13)
- Assigned by
- BD
- NVD analysis
- Modified
- Record last updated
- Sep 16, 2024
- First seen by InfoSec Signals
- Oct 12, 2026
Affected products
Becton Dickinson (BD) BD Pyxis Anesthesia Station ES becton_dickinson_bd:bd_pyxis_anesthesia_station_es (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis Anesthesia Station 4000 becton_dickinson_bd:bd_pyxis_anesthesia_station_4000 (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis CATO becton_dickinson_bd:bd_pyxis_cato (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis CIISafe becton_dickinson_bd:bd_pyxis_ciisafe (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis Inventory Connect becton_dickinson_bd:bd_pyxis_inventory_connect (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis IV Prep becton_dickinson_bd:bd_pyxis_iv_prep (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis JITrBUD becton_dickinson_bd:bd_pyxis_jitrbud (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis KanBan RF becton_dickinson_bd:bd_pyxis_kanban_rf (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis Logistics becton_dickinson_bd:bd_pyxis_logistics (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis Med Link Family becton_dickinson_bd:bd_pyxis_med_link_family (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis MedBank becton_dickinson_bd:bd_pyxis_medbank (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis MedStation 4000 becton_dickinson_bd:bd_pyxis_medstation_4000 (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis MedStation ES becton_dickinson_bd:bd_pyxis_medstation_es (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis MedStation ES Server becton_dickinson_bd:bd_pyxis_medstation_es_server (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis ParAssist becton_dickinson_bd:bd_pyxis_parassist (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis PharmoPack becton_dickinson_bd:bd_pyxis_pharmopack (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis ProcedureStation (including EC) becton_dickinson_bd:bd_pyxis_procedurestation_including_ec (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis Rapid Rx becton_dickinson_bd:bd_pyxis_rapid_rx (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis StockStation becton_dickinson_bd:bd_pyxis_stockstation (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis SupplyCenter becton_dickinson_bd:bd_pyxis_supplycenter (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis SupplyRoller becton_dickinson_bd:bd_pyxis_supplyroller (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis SupplyStation (including RF, EC, CP) becton_dickinson_bd:bd_pyxis_supplystation_including_rf_ec_cp (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis Track and Deliver becton_dickinson_bd:bd_pyxis_track_and_deliver (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Rowa Pouch Packaging Systems becton_dickinson_bd:bd_rowa_pouch_packaging_systems (from the name) | all versions | CNA record |
bd pyxis_anesthesia_station_es_firmware bd:pyxis_anesthesia_station_es_firmware | all versions | NVD |
bd pyxis_anesthesia_station_4000_firmware bd:pyxis_anesthesia_station_4000_firmware | all versions | NVD |
bd pyxis_cato_firmware bd:pyxis_cato_firmware | all versions | NVD |
bd pyxis_ciisafe_firmware bd:pyxis_ciisafe_firmware | all versions | NVD |
bd pyxis_inventory_connect_firmware bd:pyxis_inventory_connect_firmware | all versions | NVD |
bd pyxis_iv_prep_firmware bd:pyxis_iv_prep_firmware | all versions | NVD |
bd pyxis_jitrbud_firmware bd:pyxis_jitrbud_firmware | all versions | NVD |
bd pyxis_kanban_rf_firmware bd:pyxis_kanban_rf_firmware | all versions | NVD |
bd pyxis_logistics_firmware bd:pyxis_logistics_firmware | all versions | NVD |
bd pyxis_med_link_family_firmware bd:pyxis_med_link_family_firmware | all versions | NVD |
bd pyxis_medbank_firmware bd:pyxis_medbank_firmware | all versions | NVD |
bd pyxis_medstation_4000_firmware bd:pyxis_medstation_4000_firmware | all versions | NVD |
bd pyxis_medstation_es_firmware bd:pyxis_medstation_es_firmware | all versions | NVD |
bd pyxis_medstation_es_server_firmware bd:pyxis_medstation_es_server_firmware | all versions | NVD |
bd pyxis_parassist_firmware bd:pyxis_parassist_firmware | all versions | NVD |
bd pyxis_pharmopack_firmware bd:pyxis_pharmopack_firmware | all versions | NVD |
bd pyxis_procedurestation_firmware bd:pyxis_procedurestation_firmware | all versions | NVD |
bd pyxis_rapid_rx_firmware bd:pyxis_rapid_rx_firmware | all versions | NVD |
bd pyxis_stockstation_firmware bd:pyxis_stockstation_firmware | all versions | NVD |
bd pyxis_supplycenter_firmware bd:pyxis_supplycenter_firmware | all versions | NVD |
bd pyxis_supplyroller_firmware bd:pyxis_supplyroller_firmware | all versions | NVD |
bd pyxis_supplystation_firmware bd:pyxis_supplystation_firmware | all versions | NVD |
bd pyxis_track_and_deliver_firmware bd:pyxis_track_and_deliver_firmware | all versions | NVD |
bd rowa_pouch_packaging_systems_firmware bd:rowa_pouch_packaging_systems_firmware | all versions | NVD |
References
- https://cybersecurity.bd.com/bulletins-and-patches/bd-pyxis-products---hardcoded-credentialsx-refsource-confirm, vendor-advisory
- https://www.cisa.gov/uscert/ics/advisories/icsma-22-062-01x-refsource-misc, third-party-advisory, us-government-resource
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.