CVE-2022-22765
HIGHBD Viper LT System Firmware 2.0-4.80 - Use of Hard-coded Credentials
Title source: llmDescription
BD Viper LT system, versions 2.0 and later, contains hardcoded credentials. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII). BD Viper LT system versions 4.0 and later utilize Microsoft Windows 10 and have additional Operating System hardening configurations which increase the attack complexity required to exploit this vulnerability.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
https://cybersecurity.bd.com/bulletins-and-patches/bd-viper-lt-system-%E2%80%93-hardcoded-credentials
Third Party Advisory, US Government Resource x_refsource_misc
https://www.cisa.gov/uscert/ics/advisories/icsma-22-062-02
Scores
CVSS v3
8.0
EPSS
0.0023
EPSS Percentile
13.3%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Details
CWE
CWE-798
Status
published
Products (1)
bd/viper_lt_system_firmware
2.0 - 4.80
Published
Feb 12, 2022
Tracked Since
Feb 18, 2026