Vulnerability Details CVE-2018-10595
A vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor) to issue SQL commands, which may result in loss or corruption of data.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 44.7%
CVSS Severity
CVSS v3 Score 6.3
CVSS v2 Score 4.9
References
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-142-01
- https://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletin-bd-kiestra-tla-bd-kiestra-wca-bd-inoqula
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-142-01
- https://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletin-bd-kiestra-tla-bd-kiestra-wca-bd-inoqula
Products affected by CVE-2018-10595
-
cpe:2.3:a:bd:database_manager:3.0.1.0
-
cpe:2.3:a:bd:performa:2.0.14.0
-
cpe:2.3:a:bd:performa:3.0.0.0
-
cpe:2.3:a:bd:reada:1.1.0.2
-
cpe:2.3:h:bd:inoqula+:-
-
cpe:2.3:h:bd:kiestra_tla:-
-
cpe:2.3:h:bd:kiestra_wca:-