Manufacturer BD and CISA said the flaw affects the BD Totalys MultiProcessor versions 1.70 and earlier.
The flaw allows attackers to use hard-coded credentials that could give them access to, modify or delete sensitive information, including electronic protected health information and personally identifiable information.
According to BD, there have been no reports of the vulnerability being exploited, including in clinical settings.
BD says it is currently working to remedy the flaw and that a software update, set to release in the fourth quarter of 2022, should fix it.
Becker’s 3rd Annual Fall Chief Pharmacy Officer Summit is the top tier event that the people leading the future of pharmacy convene. This 3-day event is built specifically for Chief Pharmacy Officers and senior pharmacy leaders. The sessions examine the workforce, financial and clinical priorities shaping pharmacy today. Becker’s is where candid discussions flourish and new ideas thrive. Becker's 3rd Annual Fall Chief Pharmacy Officer Summit