CVE-2022-40263: BD Totalys MultiProcessor - Hardcoded Credentials
BD Totalys MultiProcessor, versions 1.70 and earlier, contain hardcoded credentials. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII). Customers using BD Totalys MultiProcessor version 1.70 with Microsoft Windows 10 have additional operating system hardening configurations which increase the attack complexity required to exploit this vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
BD Totalys MultiProcessorto a version that resolves this vulnerability.Fixed in 1.71
Event History
Frequently Asked Questions
What is CVE-2022-40263?
CVE-2022-40263 is a vulnerability in BD Totalys MultiProcessor versions 1.70 and earlier that allows threat actors to access, modify, or delete sensitive information due to hardcoded credentials.
What is the severity of CVE-2022-40263?
CVE-2022-40263 has a severity score of 7.8, which is considered high.
How does CVE-2022-40263 impact BD Totalys MultiProcessor?
CVE-2022-40263 allows threat actors to exploit the hardcoded credentials in BD Totalys MultiProcessor versions 1.70 and earlier, potentially gaining unauthorized access to sensitive information.
What could happen if CVE-2022-40263 is exploited?
If CVE-2022-40263 is exploited, threat actors may be able to access, modify, or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI), and personally identifiable information (PII).
How can I fix CVE-2022-40263?
To fix CVE-2022-40263, it is recommended to update BD Totalys MultiProcessor to version 1.71 or later, which addresses the hardcoded credentials vulnerability.