CVE-2024-10476
Quick assessment
Affected
Becton Dickinson & Co BD BACTEC™ Blood Culture System
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
BD BACTEC Blood Culture System等都是美国碧迪医疗（BD）公司的产品。BD BACTEC Blood Culture System是一个血液培养基系统。BD COR System是一个全自动和集成的高通量诊断系统。BD EpiCenter Microbiology Data Management System是一个微生物学数据管理系统。 BD多款产品存在安全漏洞，该漏洞源于使用了默认凭证，导致攻击者能够访问、修改或删除数据。以下产品受到影响：BD BACTEC Blood Cu
Possible ATT&CK Techniques 1 AI
T1078 · Valid Accounts
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-10476
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as protected health information (PHI) and personally identifiable information (PII). Exploitation of this vulnerability may allow an attacker to shut down or otherwise impact the availability of the system. Note: BD Synapsys™ Informatics
Solution is only in scope of
this vulnerability when
installed on a NUC server. BD Synapsys™
Informatics Solution installed
on a customer-provided virtual machine or on the BD Kiestra™ SCU hardware is
not in scope.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1392
Source: CVE Program / CVE List V5
Vulnerability Title
BD多款产品 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
BD BACTEC Blood Culture System等都是美国碧迪医疗（BD）公司的产品。BD BACTEC Blood Culture System是一个血液培养基系统。BD COR System是一个全自动和集成的高通量诊断系统。BD EpiCenter Microbiology Data Management System是一个微生物学数据管理系统。 BD多款产品存在安全漏洞，该漏洞源于使用了默认凭证，导致攻击者能够访问、修改或删除数据。以下产品受到影响：BD BACTEC Blood Cu
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Becton Dickinson & Co | BD BACTEC™ Blood Culture System | 0 ~ 7.20 | - |
|
| Becton Dickinson & Co | BD COR™ System | 0 ~ 8.90 | - |
|
| Becton Dickinson & Co | BD EpiCenter™ Microbiology Data Management System | 0 ~ 7.45 | - |
|
| Becton Dickinson & Co | BD MAX™ System | 0 ~ 6.10 | - |
|
| Becton Dickinson & Co | BD Phoenix™ M50 Automated Microbiology System | 0 ~ 2.70 | - |
|
| Becton Dickinson & Co | BD Synapsys™ Informatics Solution | 0 ~ 6.10 | - |
|
II. Public POCs for CVE-2024-10476
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-10476
请登录查看更多情报信息。
Vendor Advisories for CVE-2024-10476 (1)
IV. Related Vulnerabilities
Same vendor: Becton Dickinson & Co
Same weakness: CWE-1392
-
CVE-2026-108783
PRVTPRO Amnezia-Web-Panel Backup Download app.py default cre -
CVE-2026-100103
Authentication bypass via default auth token in P4Search -
CVE-2026-90924
Default Admin Credentials in Innotim Software's Logsign SIEM -
CVE-2026-97064
X-SpringBoot through 6.0 Authentication Bypass via Static Ma -
CVE-2026-97649
ningzichun student-management-system example_lite.sql defaul
V. Comments for CVE-2024-10476
No comments yet