Vulnerability Details CVE-2018-10593
A vulnerability in DB Manager version 3.0.1.0 and previous and PerformA version 3.0.0.0 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor) to issue SQL commands, which may result in data corruption.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 39.4%
CVSS Severity
CVSS v3 Score 5.6
CVSS v2 Score 3.8
References
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-142-01
- https://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletin-bd-kiestra-tla-bd-kiestra-wca-bd-inoqula
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-142-01
- https://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletin-bd-kiestra-tla-bd-kiestra-wca-bd-inoqula
Products affected by CVE-2018-10593
-
cpe:2.3:a:bd:database_manager:3.0.1.0
-
cpe:2.3:a:bd:performa:2.0.14.0
-
cpe:2.3:a:bd:performa:3.0.0.0
-
cpe:2.3:a:bd:reada:1.1.0.2
-
cpe:2.3:h:bd:inoqula+:-
-
cpe:2.3:h:bd:kiestra_tla:-
-
cpe:2.3:h:bd:kiestra_wca:-