Read the docs
TI-2022-07015 Aliases CVE-2022-22765GHSA-4244-wg8v-q7j8

BD Viper LT System - Hardcoded Credentials

Priority LOW 34CWE-798Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · Low
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-798.

Summary

BD Viper LT system, versions 2.0 and later, contains hardcoded credentials. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII). BD Viper LT system versions 4.0 and later utilize Microsoft Windows 10 and have additional Operating System hardening configurations which increase the attack complexity required to exploit this vulnerability.

Why it matters now

EPSS 0.00231 14th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Becton, Dickinson and Company (BD)BD Viper LT Systemnext of 2.0 and later—No fix listedCNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:bd:viper_lt_system_firmware:*:*:*:*:*:*:*:*2.0 to before 4.80VulnerableBecton, Dickinson and Company (BD)
cpe:2.3:h:bd:viper_lt_system:-:*:*:*:*:*:*:*not specified by NVDRunning onBecton, Dickinson and Company (BD)

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-22765
  2. 2026-10-03 Alias added: GHSA-4244-wg8v-q7j8

References

Sources