CVE-2022-22767BD Pyxis™ Products – Default Credentials
Updated under an hour ago ()
Does this affect you?
It affects Becton Dickinson (BD) BD Pyxis™ Anesthesia ES Station and 31 other products. Add what you run to find out whether that includes you.
EPSS puts the chance of exploitation in the next 30 days at 0.42%, higher than 35% of scored CVEs.
Do this next
Free account, 1 product
Specific BD Pyxis™ products were installed with default credentials and may presently still operate with these credentials. There may be scenarios where BD Pyxis™ products are installed with the same default local operating system credentials or domain-joined server(s) credentials that may be shared across product types. If exploited, threat actors may be able to gain privileged access to the underlying file system and could potentially exploit or gain access to ePHI or other sensitive information.
- CVSS
- 8.8 HIGH (v3.1, CNA)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-262
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- 0.42% (percentile 35)
- Assigned by
- BD
- NVD analysis
- Modified
- Record last updated
- Sep 16, 2024
- First seen by InfoSec Signals
- Oct 12, 2026
Affected products
Becton Dickinson (BD) BD Pyxis™ Anesthesia ES Station becton_dickinson_bd:bd_pyxistm_anesthesia_es_station (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis™ CIISafe becton_dickinson_bd:bd_pyxistm_ciisafe (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis™ Logistics becton_dickinson_bd:bd_pyxistm_logistics (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis™ MedBank becton_dickinson_bd:bd_pyxistm_medbank (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis™ MedStation™ 4000 becton_dickinson_bd:bd_pyxistm_medstationtm_4000 (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis™ MedStation™ ES becton_dickinson_bd:bd_pyxistm_medstationtm_es (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis™ MedStation™ ES Server becton_dickinson_bd:bd_pyxistm_medstationtm_es_server (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis™ ParAssist becton_dickinson_bd:bd_pyxistm_parassist (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis™ Rapid Rx becton_dickinson_bd:bd_pyxistm_rapid_rx (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis™ StockStation becton_dickinson_bd:bd_pyxistm_stockstation (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis™ SupplyCenter becton_dickinson_bd:bd_pyxistm_supplycenter (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis™ SupplyRoller becton_dickinson_bd:bd_pyxistm_supplyroller (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis™ SupplyStation™ becton_dickinson_bd:bd_pyxistm_supplystationtm (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis™ SupplyStation™ EC becton_dickinson_bd:bd_pyxistm_supplystationtm_ec (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Pyxis™ SupplyStation™ RF auxiliary becton_dickinson_bd:bd_pyxistm_supplystationtm_rf_auxiliary (from the name) | all versions | CNA record |
Becton Dickinson (BD) BD Rowa™ Pouch Packaging Systems becton_dickinson_bd:bd_rowatm_pouch_packaging_systems (from the name) | all versions | CNA record |
bd pyxis_anesthesia_station_es_firmware bd:pyxis_anesthesia_station_es_firmware | all versions | NVD |
bd pyxis_ciisafe_firmware bd:pyxis_ciisafe_firmware | all versions | NVD |
bd pyxis_logistics_firmware bd:pyxis_logistics_firmware | all versions | NVD |
bd pyxis_medbank_firmware bd:pyxis_medbank_firmware | all versions | NVD |
bd pyxis_medstation_4000_firmware bd:pyxis_medstation_4000_firmware | all versions | NVD |
bd pyxis_medstation_es_firmware bd:pyxis_medstation_es_firmware | all versions | NVD |
bd pyxis_medstation_es_server_firmware bd:pyxis_medstation_es_server_firmware | all versions | NVD |
bd pyxis_parassist_firmware bd:pyxis_parassist_firmware | all versions | NVD |
bd pyxis_rapid_rx_firmware bd:pyxis_rapid_rx_firmware | all versions | NVD |
bd pyxis_stockstation_firmware bd:pyxis_stockstation_firmware | all versions | NVD |
bd pyxis_supplycenter_firmware bd:pyxis_supplycenter_firmware | all versions | NVD |
bd pyxis_supplyroller_firmware bd:pyxis_supplyroller_firmware | all versions | NVD |
bd pyxis_supplystation_firmware bd:pyxis_supplystation_firmware | all versions | NVD |
bd pyxis_supplystation_ec_firmware bd:pyxis_supplystation_ec_firmware | all versions | NVD |
bd pyxis_supplystation_rf_auxiliary_firmware bd:pyxis_supplystation_rf_auxiliary_firmware | all versions | NVD |
bd rowa_pouch_packaging_systems_firmware bd:rowa_pouch_packaging_systems_firmware | all versions | NVD |
References
- https://cybersecurity.bd.com/bulletins-and-patches/bd-pyxis-products-default-credentialsx-refsource-confirm, vendor-advisory
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.