CVE-2018-10593 A vulnerability in DB Manager version 3.0.1.0 and previous and PerformA version 3.0.0.0 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA,....
MediumCVSS 5.6
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability in DB Manager version 3.0.1.0 and previous and PerformA version 3.0.0.0 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor) to issue SQL commands, which may result in data corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bd database manager | = 3.0.1.0 | No fix listed |
| bd performa | <= 3.0.0.0 | No fix listed |
| bd reada | <= 1.1.0.2 | No fix listed |
| Becton, Dickinson and Company Kiestra and InoqulA systems | = Kiestra TLA, BD Kiestra WCA, and BD InoqulA+ specimen processor using Database (DB) Manager version 3.0.1.0, and previous, and PerformA version 3.0.0.0 and previous. | No fix listed |
References
- ics-cert.us-cert.gov third-party-advisory us-government-resource
- www.bd.com vendor-advisory