Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-40263


BD Totalys MultiProcessor, versions 1.70 and earlier, contain hardcoded credentials. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII). Customers using BD Totalys MultiProcessor version 1.70 with Microsoft Windows 10 have additional operating system hardening configurations which increase the attack complexity required to exploit this vulnerability.


Published

2022-11-04T19:15:11.087

Last Modified

2024-11-21T07:21:09.190

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.6 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-798
  • Type: Primary
    CWE-798

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System bd totalys_multiprocessor_firmware < 1.71 Yes
Hardware bd totalys_multiprocessor - No

References