CVE-2018-10595 A vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor) t...
MediumCVSS 6.3
EPSS 0.41%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor) to issue SQL commands, which may result in loss or corruption of data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bd database manager | = 3.0.1.0 | No fix listed |
| bd performa | <= 3.0.0.0 | No fix listed |
| bd reada | <= 1.1.0.2 | No fix listed |
| Becton, Dickinson and Company Kiestra and InoqulA systems | = Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor using ReadA Overview version 1.1.0.2 and previous. | No fix listed |
References
- ics-cert.us-cert.gov third-party-advisory us-government-resource
- www.bd.com vendor-advisory