CVE Vulnerability

CVE-2018-10593

A vulnerability in DB Manager version 3.0.1.0 and previous and PerformA version 3.0.0.0 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor) to issue SQL commands, which may result in data corruption.

3.8 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 4.4 / Impact : 4.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

5.6 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.4 / Impact : 5.2

Attack Vector ADJACENT_NETWORK

Attack Complexity HIGH

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletin-bd-kiestra-tla-bd-kiestra-wca-bd-inoqula Vendor Advisory
https://ics-cert.us-cert.gov/advisories/ICSMA-18-142-01 Third Party Advisory US Government Resource
Configurations

Configuration 1
Information

Published : 2018-05-24 04:29

Updated : 2019-10-09 11:32

NVD link : CVE-2018-10593

Mitre link : CVE-2018-10593

Products Affected
No products.
CWE
CWE-89