What’s Vulnerable › Vulnerabilities

CVE-2022-22765: BD Viper LT System - Hardcoded Credentials

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-02-12 · updated 2026-06-17
• Weakness: CWE-798

Description

BD Viper LT system, versions 2.0 and later, contains hardcoded credentials. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII). BD Viper LT system versions 4.0 and later utilize Microsoft Windows 10 and have additional Operating System hardening configurations which increase the attack complexity required to exploit this vulnerability.

Affected products

• Becton Dickinson (BD) BD Viper LT System: from 2.0 before 4.80 — fixed in 4.80

How to fix

Upgrade to a fixed version: Becton Dickinson (BD) BD Viper LT System 4.80. Check the vendor advisory for mitigations.

References

• https://cybersecurity.bd.com/bulletins-and-patches/bd-viper-lt-system-%E2%80%93-hardcoded-credentials
• https://www.cisa.gov/uscert/ics/advisories/icsma-22-062-02
• https://cybersecurity.bd.com/bulletins-and-patches/bd-viper-lt-system-%E2%80%93-hardcoded-credentials
• https://www.cisa.gov/uscert/ics/advisories/icsma-22-062-02

Get alerted when CVE-2022-22765 or the next vulnerability affects your stack