N/A

Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as protected health information (PHI) and personally identifiable information (PII). Exploitation of this vulnerability may allow an attacker to shut down or otherwise impact the availability of the system. Note: BD Synapsys™ Informatics Solution is only in scope of this vulnerability when installed on a NUC server. BD Synapsys™ Informatics Solution installed on a customer-provided virtual machine or on the BD Kiestra™ SCU hardware is not in scope.

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-1392

BD多款产品 安全漏洞

BD BACTEC Blood Culture System等都是美国碧迪医疗（BD）公司的产品。BD BACTEC Blood Culture System是一个血液培养基系统。BD COR System是一个全自动和集成的高通量诊断系统。BD EpiCenter Microbiology Data Management System是一个微生物学数据管理系统。 BD多款产品存在安全漏洞，该漏洞源于使用了默认凭证，导致攻击者能够访问、修改或删除数据。以下产品受到影响：BD BACTEC Blood Cu

N/A

N/A