CVE-2018-10593

Опубликовано: 24 мая 2018

Источник: nvd

CVSS3: 5.6

CVSS2: 3.8

EPSS Низкий

Описание

A vulnerability in DB Manager version 3.0.1.0 and previous and PerformA version 3.0.0.0 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor) to issue SQL commands, which may result in data corruption.

Ссылки

https://ics-cert.us-cert.gov/advisories/ICSMA-18-142-01
Third Party Advisory
US Government Resource
https://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletin-bd-kiestra-tla-bd-kiestra-wca-bd-inoqula
Vendor Advisory
https://ics-cert.us-cert.gov/advisories/ICSMA-18-142-01
Third Party Advisory
US Government Resource
https://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletin-bd-kiestra-tla-bd-kiestra-wca-bd-inoqula
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:bd:database_manager:3.0.1.0:*:*:*:*:*:*:*

cpe:2.3:a:bd:performa:*:*:*:*:*:*:*:*

Версия до 3.0.0.0 (включая)

cpe:2.3:a:bd:reada:*:*:*:*:*:*:*:*

Версия до 1.1.0.2 (включая)

Одно из

cpe:2.3:h:bd:inoqula\+:-:*:*:*:*:*:*:*

cpe:2.3:h:bd:kiestra_tla:-:*:*:*:*:*:*:*

cpe:2.3:h:bd:kiestra_wca:-:*:*:*:*:*:*:*

EPSS

Процентиль: 39%

0.00172

Низкий

5.6 Medium

CVSS3

3.8 Low

CVSS2

Дефекты

CWE-356

CWE-89

Связанные уязвимости

GHSA-gjwf-hgg5-m3rx