CVE-2022-22765

HIGH

BD Viper LT System Firmware 2.0-4.80 - Use of Hard-coded Credentials

Title source: llm
STIX 2.1

Description

BD Viper LT system, versions 2.0 and later, contains hardcoded credentials. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII). BD Viper LT system versions 4.0 and later utilize Microsoft Windows 10 and have additional Operating System hardening configurations which increase the attack complexity required to exploit this vulnerability.

References (2)

Core 2
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://www.cisa.gov/uscert/ics/advisories/icsma-22-062-02

Scores

CVSS v3 8.0
EPSS 0.0023
EPSS Percentile 13.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Details

CWE
CWE-798
Status published
Products (1)
bd/viper_lt_system_firmware 2.0 - 4.80
Published Feb 12, 2022
Tracked Since Feb 18, 2026