Summary
Successful exploitation of this vulnerability could allow an attacker to access, modify, or delete sensitive information. This includes electronic protected health information (ePHI), protected health information (PHI), and personally identifiable information (PII).
Vulnerabilities 1
-
Medium 5.7
BD Synapsys™ – Insufficient Session Expiration
BD Synapsys™, versions 4.20, 4.20 SR1, and 4.30, contain an insufficient session expiration vulnerability. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), pro…
Revision history
-
#1
ICSMA-22-151-02 BD Synapsys
References
-
ICS Advisory ICSMA-22-151-02 Web Version
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-22-151-02
-
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
-
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/publications/emailscams_0905.pdf