CVE Vulnerability

CVE-2018-10595

A vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor) to issue SQL commands, which may result in loss or corruption of data.

4.9 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 4.4 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

6.3 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.4 / Impact : 5.9

Attack Vector ADJACENT_NETWORK

Attack Complexity HIGH

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletin-bd-kiestra-tla-bd-kiestra-wca-bd-inoqula Vendor Advisory
https://ics-cert.us-cert.gov/advisories/ICSMA-18-142-01 Third Party Advisory US Government Resource
Configurations

Configuration 1
Information

Published : 2018-05-24 04:29

Updated : 2019-10-09 11:32

NVD link : CVE-2018-10595

Mitre link : CVE-2018-10595

Products Affected
No products.
CWE
CWE-89