CVE-2024-10476: Becton Dickinson & Co BD BACTEC™ Blood Culture System vulnerability
Becton Dickinson & Co · BD BACTEC™ Blood Culture System
Affected: Becton Dickinson & Co BD BACTEC™ Blood Culture System · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 14% of scored CVEs
DescriptionCVE.org
Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as protected health information (PHI) and personally identifiable information (PII). Exploitation of this vulnerability may allow an attacker to shut down or otherwise impact the availability of the system. Note: BD Synapsys™ Informatics Solution is only in scope of this vulnerability when installed on a NUC server. BD Synapsys™ Informatics Solution installed on a customer-provided virtual machine or on the BD Kiestra™ SCU hardware is not in scope.
Affected products6
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Becton Dickinson & Co · BD BACTEC™ Blood Culture Systemup to and including 7.20
- Becton Dickinson & Co · BD COR™ Systemup to and including 8.90
- Becton Dickinson & Co · BD EpiCenter™ Microbiology Data Management Systemup to and including 7.45
- Becton Dickinson & Co · BD MAX™ Systemup to and including 6.10
- Becton Dickinson & Co · BD Phoenix™ M50 Automated Microbiology Systemup to and including 2.70
- Becton Dickinson & Co · BD Synapsys™ Informatics Solutionup to and including 6.10
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Becton Dickinson & Co
- Published
- December 2024
CoverageNo articles yet
No CyberSIXT article names CVE-2024-10476 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.