CVE:CVE-2022-22766
CNNVD:CNNVD-202202-1090
BD Pyxis是美国碧迪医疗（BD）公司的一套药物管理系统。
BD Pyxis 存在安全漏洞，该漏洞源于在特定的BD Pyxis产品中使用硬编码凭证。如果被利用，威胁参与者可能会获得对底层文件系统的访问权，并可能利用应用程序文件获取可用于解密应用程序凭证的信息，或获得对电子保护健康信息(ePHI)或其他敏感信息的访问权。
solution:Upgrade bd pyxis_anesthesia_station_es_firmware to a higher version than *; Upgrade bd pyxis_anesthesia_station_4000_firmware to a higher version than *; Upgrade bd pyxis_cato_firmware to a higher version than *; Upgrade bd pyxis_ciisafe_firmware to a higher version than *; Upgrade bd pyxis_inventory_connect_firmware to a higher version than *; Upgrade bd pyxis_iv_prep_firmware to a higher version than *; Upgrade bd pyxis_jitrbud_firmware to a higher version than *; Upgrade bd pyxis_kanban_rf_firmware to a higher version than *; Upgrade bd pyxis_logistics_firmware to a higher version than *; Upgrade bd pyxis_med_link_family_firmware to a higher version than *; Upgrade bd pyxis_medbank_firmware to a higher version than *; Upgrade bd pyxis_medstation_4000_firmware to a higher version than *; Upgrade bd pyxis_medstation_es_firmware to a higher version than *; Upgrade bd pyxis_medstation_es_server_firmware to a higher version than *; Upgrade bd pyxis_parassist_firmware to a higher version than *; Upgrade bd pyxis_pharmopack_firmware to a higher version than *; Upgrade bd pyxis_procedurestation_firmware to a higher version than *; Upgrade bd pyxis_rapid_rx_firmware to a higher version than *; Upgrade bd pyxis_stockstation_firmware to a higher version than *; Upgrade bd pyxis_supplycenter_firmware to a higher version than *; Upgrade bd pyxis_supplyroller_firmware to a higher version than *; Upgrade bd pyxis_supplystation_firmware to a higher version than *; Upgrade bd pyxis_track_and_deliver_firmware to a higher version than *; Upgrade bd rowa_pouch_packaging_systems_firmware to a higher version than *