Bd Pyxis Supplyroller Firmware vulnerabilities

2 CVEs affecting Bd Pyxis Supplyroller Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-22767, published 2022-06-02.

More from Bd.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-22767, published 2022-06-02. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Specific BD Pyxis™ products were installed with default credentials and may presently still operate with these credentials. There may be scenarios where BD Pyxis™ products are installed with the same…
• CVE-2022-22766, published 2022-02-11. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to the underlying file system and could potentially exploit application files for…