{"cve":{"cve_id":"CVE-2022-22766","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":0.00224,"epss_percentile":0.12837,"epss_as_of":"2026-06-23","description":"Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to the underlying file system and could potentially exploit application files for information that could be used to decrypt application credentials or gain access to electronic protected health information (ePHI) or other sensitive information.","published_at":"2022-02-11T18:12:07.247000Z","last_modified_at":null,"cvss_v3_score":7.0,"cvss_v3_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_v3_severity":"HIGH","cvss_v4_score":null,"cvss_v4_vector":null,"cvss_v4_severity":null,"ssvc_decision":null,"ssvc_exploitation":null,"ssvc_automatable":null,"ssvc_technical_impact":null,"cwes":["CWE-798"],"nvd_references":["https://cybersecurity.bd.com/bulletins-and-patches/bd-pyxis-products---hardcoded-credentials","https://www.cisa.gov/uscert/ics/advisories/icsma-22-062-01"],"vuln_status":null,"trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-06-24T00:09:39.878444Z","updated_at":"2026-06-28T23:17:01.809616Z"},"effective_severity":"HIGH","badges":[],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.1","metrics":[{"metric":"AV","name":"Attack Vector","value":"L","value_label":"Local"},{"metric":"AC","name":"Attack Complexity","value":"H","value_label":"High"},{"metric":"PR","name":"Privileges Required","value":"L","value_label":"Low"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"S","name":"Scope","value":"U","value_label":"Unchanged"},{"metric":"C","name":"Confidentiality","value":"H","value_label":"High"},{"metric":"I","name":"Integrity","value":"H","value_label":"High"},{"metric":"A","name":"Availability","value":"H","value_label":"High"}]},"cvss_v4_decoded":{"version":null,"metrics":[]},"affected":[{"vendor_slug":"becton-dickinson-bd","vendor_name":"Becton Dickinson (BD)","product_slug":"bd-pyxis-anesthesia-station-4000","product_name":"BD Pyxis Anesthesia Station 4000","version_start":"All","version_start_inclusive":true,"version_end":"All","version_end_inclusive":true,"cpe23_uri":"cve5:becton-dickinson-bd:bd-pyxis-anesthesia-station-4000:All:All"},{"vendor_slug":"becton-dickinson-bd","vendor_name":"Becton Dickinson (BD)","product_slug":"bd-pyxis-anesthesia-station-es","product_name":"BD Pyxis Anesthesia Station ES","version_start":"All","version_start_inclusive":true,"version_end":"All","version_end_inclusive":true,"cpe23_uri":"cve5:becton-dickinson-bd:bd-pyxis-anesthesia-station-es:All:All"},{"vendor_slug":"becton-dickinson-bd","vendor_name":"Becton Dickinson (BD)","product_slug":"bd-pyxis-cato","product_name":"BD Pyxis CATO","version_start":"All","version_start_inclusive":true,"version_end":"All","version_end_inclusive":true,"cpe23_uri":"cve5:becton-dickinson-bd:bd-pyxis-cato:All:All"},{"vendor_slug":"becton-dickinson-bd","vendor_name":"Becton Dickinson (BD)","product_slug":"bd-pyxis-ciisafe","product_name":"BD Pyxis™ CIISafe","version_start":"All","version_start_inclusive":true,"version_end":"All","version_end_inclusive":true,"cpe23_uri":"cve5:becton-dickinson-bd:bd-pyxis-ciisafe:All:All"},{"vendor_slug":"becton-dickinson-bd","vendor_name":"Becton Dickinson (BD)","product_slug":"bd-pyxis-inventory-connect","product_name":"BD Pyxis Inventory Connect","version_start":"All","version_start_inclusive":true,"version_end":"All","version_end_inclusive":true,"cpe23_uri":"cve5:becton-dickinson-bd:bd-pyxis-inventory-connect:All:All"},{"vendor_slug":"becton-dickinson-bd","vendor_name":"Becton Dickinson (BD)","product_slug":"bd-pyxis-iv-prep","product_name":"BD Pyxis IV Prep","version_start":"All","version_start_inclusive":true,"version_end":"All","version_end_inclusive":true,"cpe23_uri":"cve5:becton-dickinson-bd:bd-pyxis-iv-prep:All:All"},{"vendor_slug":"becton-dickinson-bd","vendor_name":"Becton Dickinson (BD)","product_slug":"bd-pyxis-jitrbud","product_name":"BD Pyxis JITrBUD","version_start":"All","version_start_inclusive":true,"version_end":"All","version_end_inclusive":true,"cpe23_uri":"cve5:becton-dickinson-bd:bd-pyxis-jitrbud:All:All"},{"vendor_slug":"becton-dickinson-bd","vendor_name":"Becton Dickinson (BD)","product_slug":"bd-pyxis-kanban-rf","product_name":"BD Pyxis KanBan RF","version_start":"All","version_start_inclusive":true,"version_end":"All","version_end_inclusive":true,"cpe23_uri":"cve5:becton-dickinson-bd:bd-pyxis-kanban-rf:All:All"},{"vendor_slug":"becton-dickinson-bd","vendor_name":"Becton Dickinson (BD)","product_slug":"bd-pyxis-logistics","product_name":"BD Pyxis™ Logistics","version_start":"All","version_start_inclusive":true,"version_end":"All","version_end_inclusive":true,"cpe23_uri":"cve5:becton-dickinson-bd:bd-pyxis-logistics:All:All"},{"vendor_slug":"becton-dickinson-bd","vendor_name":"Becton Dickinson (BD)","product_slug":"bd-pyxis-medbank","product_name":"BD Pyxis™ MedBank","version_start":"All","version_start_inclusive":true,"version_end":"All","version_end_inclusive":true,"cpe23_uri":"cve5:becton-dickinson-bd:bd-pyxis-medbank:All:All"},{"vendor_slug":"becton-dickinson-bd","vendor_name":"Becton Dickinson (BD)","product_slug":"bd-pyxis-med-link-family","product_name":"BD Pyxis Med Link Family","version_start":"All","version_start_inclusive":true,"version_end":"All","version_end_inclusive":true,"cpe23_uri":"cve5:becton-dickinson-bd:bd-pyxis-med-link-family:All:All"},{"vendor_slug":"becton-dickinson-bd","vendor_name":"Becton Dickinson (BD)","product_slug":"bd-pyxis-medstation-4000","product_name":"BD Pyxis™ MedStation™ 4000","version_start":"All","version_start_inclusive":true,"version_end":"All","version_end_inclusive":true,"cpe23_uri":"cve5:becton-dickinson-bd:bd-pyxis-medstation-4000:All:All"},{"vendor_slug":"becton-dickinson-bd","vendor_name":"Becton Dickinson (BD)","product_slug":"bd-pyxis-medstation-es","product_name":"BD Pyxis™ MedStation™ ES","version_start":"All","version_start_inclusive":true,"version_end":"All","version_end_inclusive":true,"cpe23_uri":"cve5:becton-dickinson-bd:bd-pyxis-medstation-es:All:All"},{"vendor_slug":"becton-dickinson-bd","vendor_name":"Becton Dickinson (BD)","product_slug":"bd-pyxis-medstation-es-server","product_name":"BD Pyxis™ MedStation™ ES Server","version_start":"All","version_start_inclusive":true,"version_end":"All","version_end_inclusive":true,"cpe23_uri":"cve5:becton-dickinson-bd:bd-pyxis-medstation-es-server:All:All"},{"vendor_slug":"becton-dickinson-bd","vendor_name":"Becton Dickinson (BD)","product_slug":"bd-pyxis-parassist","product_name":"BD Pyxis™ ParAssist","version_start":"All","version_start_inclusive":true,"version_end":"All","version_end_inclusive":true,"cpe23_uri":"cve5:becton-dickinson-bd:bd-pyxis-parassist:All:All"},{"vendor_slug":"becton-dickinson-bd","vendor_name":"Becton Dickinson (BD)","product_slug":"bd-pyxis-pharmopack","product_name":"BD Pyxis PharmoPack","version_start":"All","version_start_inclusive":true,"version_end":"All","version_end_inclusive":true,"cpe23_uri":"cve5:becton-dickinson-bd:bd-pyxis-pharmopack:All:All"},{"vendor_slug":"becton-dickinson-bd","vendor_name":"Becton Dickinson (BD)","product_slug":"bd-pyxis-procedurestation-including-ec","product_name":"BD Pyxis ProcedureStation (including EC)","version_start":"All","version_start_inclusive":true,"version_end":"All","version_end_inclusive":true,"cpe23_uri":"cve5:becton-dickinson-bd:bd-pyxis-procedurestation-including-ec:All:All"},{"vendor_slug":"becton-dickinson-bd","vendor_name":"Becton Dickinson (BD)","product_slug":"bd-pyxis-rapid-rx","product_name":"BD Pyxis™ Rapid Rx","version_start":"All","version_start_inclusive":true,"version_end":"All","version_end_inclusive":true,"cpe23_uri":"cve5:becton-dickinson-bd:bd-pyxis-rapid-rx:All:All"},{"vendor_slug":"becton-dickinson-bd","vendor_name":"Becton Dickinson (BD)","product_slug":"bd-pyxis-stockstation","product_name":"BD Pyxis™ StockStation","version_start":"All","version_start_inclusive":true,"version_end":"All","version_end_inclusive":true,"cpe23_uri":"cve5:becton-dickinson-bd:bd-pyxis-stockstation:All:All"},{"vendor_slug":"becton-dickinson-bd","vendor_name":"Becton Dickinson (BD)","product_slug":"bd-pyxis-supplycenter","product_name":"BD Pyxis™ SupplyCenter","version_start":"All","version_start_inclusive":true,"version_end":"All","version_end_inclusive":true,"cpe23_uri":"cve5:becton-dickinson-bd:bd-pyxis-supplycenter:All:All"},{"vendor_slug":"becton-dickinson-bd","vendor_name":"Becton Dickinson (BD)","product_slug":"bd-pyxis-supplyroller","product_name":"BD Pyxis™ SupplyRoller","version_start":"All","version_start_inclusive":true,"version_end":"All","version_end_inclusive":true,"cpe23_uri":"cve5:becton-dickinson-bd:bd-pyxis-supplyroller:All:All"},{"vendor_slug":"becton-dickinson-bd","vendor_name":"Becton Dickinson (BD)","product_slug":"bd-pyxis-supplystation-including-rf-ec-cp","product_name":"BD Pyxis SupplyStation (including RF, EC, CP)","version_start":"All","version_start_inclusive":true,"version_end":"All","version_end_inclusive":true,"cpe23_uri":"cve5:becton-dickinson-bd:bd-pyxis-supplystation-including-rf-ec-cp:All:All"},{"vendor_slug":"becton-dickinson-bd","vendor_name":"Becton Dickinson (BD)","product_slug":"bd-pyxis-track-and-deliver","product_name":"BD Pyxis Track and Deliver","version_start":"All","version_start_inclusive":true,"version_end":"All","version_end_inclusive":true,"cpe23_uri":"cve5:becton-dickinson-bd:bd-pyxis-track-and-deliver:All:All"},{"vendor_slug":"becton-dickinson-bd","vendor_name":"Becton Dickinson (BD)","product_slug":"bd-rowa-pouch-packaging-systems","product_name":"BD Rowa™ Pouch Packaging Systems","version_start":"All","version_start_inclusive":true,"version_end":"All","version_end_inclusive":true,"cpe23_uri":"cve5:becton-dickinson-bd:bd-rowa-pouch-packaging-systems:All:All"}],"exploit_refs":[],"news":[],"references":[{"url":"https://cybersecurity.bd.com/bulletins-and-patches/bd-pyxis-products---hardcoded-credentials","source_type":"MISC","tags":["patch"]},{"url":"https://www.cisa.gov/uscert/ics/advisories/icsma-22-062-01","source_type":"VENDOR_ADVISORY","tags":["advisory"]}],"timeline":[{"type":"published","at":"2022-02-11T18:12:07.247000Z","label":"CVE published","source":null},{"type":"cvss_changed","at":"2026-06-28T17:21:16.760686Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-06-28T17:21:16.760686Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-06-28T17:21:16.760686Z","label":"CVSS score revised","source":"cvelistv5"}]}