CVE-2022-22766: Bd Pyxis Anesthesia Station 4000 Firmware

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to the underlying file system and could potentially exploit application files for information that could be used to decrypt application credentials or gain access to electronic protected health information (ePHI) or other sensitive information.

Affected products

• Bd Pyxis Anesthesia Station 4000 Firmware: any version
• Bd Pyxis Anesthesia Station Es Firmware: any version
• Bd Pyxis Cato Firmware: any version
• Bd Pyxis Ciisafe Firmware: any version
• Bd Pyxis Inventory Connect Firmware: any version
• Bd Pyxis Iv Prep Firmware: any version
• Bd Pyxis Jitrbud Firmware: any version
• Bd Pyxis Kanban Rf Firmware: any version
• Bd Pyxis Logistics Firmware: any version
• Bd Pyxis Med Link Family Firmware: any version
• Bd Pyxis Medbank Firmware: any version
• Bd Pyxis Medstation 4000 Firmware: any version
• Bd Pyxis Medstation Es Firmware: any version
• Bd Pyxis Medstation Es Server Firmware: any version
• Bd Pyxis Parassist Firmware: any version
• Bd Pyxis Pharmopack Firmware: any version
• Bd Pyxis Procedurestation Firmware: any version
• Bd Pyxis Rapid Rx Firmware: any version
• Bd Pyxis Stockstation Firmware: any version
• Bd Pyxis Supplycenter Firmware: any version
• Bd Pyxis Supplyroller Firmware: any version
• Bd Pyxis Supplystation Firmware: any version
• Bd Pyxis Track And Deliver Firmware: any version
• Bd Rowa Pouch Packaging Systems Firmware: any version

Published 2022-02-11. Last modified 2026-06-17.