Description
Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to the underlying file system and could potentially exploit application files for information that could be used to decrypt application credentials or gain access to electronic protected health information (ePHI) or other sensitive information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Becton Dickinson (BD) | BD Pyxis Anesthesia Station ES | All | — |
| Becton Dickinson (BD) | BD Pyxis Anesthesia Station 4000 | All | — |
| Becton Dickinson (BD) | BD Pyxis CATO | All | — |
| Becton Dickinson (BD) | BD Pyxis CIISafe | All | — |
| Becton Dickinson (BD) | BD Pyxis Inventory Connect | All | — |
| Becton Dickinson (BD) | BD Pyxis IV Prep | All | — |
| Becton Dickinson (BD) | BD Pyxis JITrBUD | All | — |
| Becton Dickinson (BD) | BD Pyxis KanBan RF | All | — |
| Becton Dickinson (BD) | BD Pyxis Logistics | All | — |
| Becton Dickinson (BD) | BD Pyxis Med Link Family | All | — |
| Becton Dickinson (BD) | BD Pyxis MedBank | All | — |
| Becton Dickinson (BD) | BD Pyxis MedStation 4000 | All | — |
| Becton Dickinson (BD) | BD Pyxis MedStation ES | All | — |
| Becton Dickinson (BD) | BD Pyxis MedStation ES Server | All | — |
| Becton Dickinson (BD) | BD Pyxis ParAssist | All | — |
| Becton Dickinson (BD) | BD Pyxis PharmoPack | All | — |
| Becton Dickinson (BD) | BD Pyxis ProcedureStation (including EC) | All | — |
| Becton Dickinson (BD) | BD Pyxis Rapid Rx | All | — |
| Becton Dickinson (BD) | BD Pyxis StockStation | All | — |
| Becton Dickinson (BD) | BD Pyxis SupplyCenter | All | — |
| Becton Dickinson (BD) | BD Pyxis SupplyRoller | All | — |
| Becton Dickinson (BD) | BD Pyxis SupplyStation (including RF, EC, CP) | All | — |
| Becton Dickinson (BD) | BD Pyxis Track and Deliver | All | — |
| Becton Dickinson (BD) | BD Rowa Pouch Packaging Systems | All | — |
Advisories 1
- ICSMA-22-062-01 BD Pyxis CISA ICS & IT advisories · Mar 3, 2022