Description
CareFusion Pyxis SupplyStation是美国康尔福盛（CareFusion）公司的一套用于医疗行业的自动化供应管理系统。 使用1.0.16之前版本硬件测试工具的CareFusion Pyxis SupplyStation 8.1版本中存在安全漏洞，该漏洞源于程序使用硬编码的服务密码。远程攻击者可利用该漏洞获取访问权限。
CareFusion Pyxis SupplyStation 硬编码密码安全绕过漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2014-5420
https://cve.imfht.com/detail/CVE-2014-5420
https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-pyxis-products-hardcoded-credentials
https://www.threatquarters.com/cves/CVE-2014-5422
https://digital.nhs.uk/cyber-alerts/2022/cc-4104
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-22-062-01
https://ics-cert.us-cert.gov/advisories/ICSMA-16-089-01
https://www.helpnetsecurity.com/2016/03/30/1400-flaws-automated-medical-supply-system/