Vulnerability Description
A vulnerability in DB Manager version 3.0.1.0 and previous and PerformA version 3.0.0.0 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor) to issue SQL commands, which may result in data corruption.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bd | Database Manager | 3.0.1.0 |
| Bd | Performa | <= 3.0.0.0 |
| Bd | Reada | <= 1.1.0.2 |
| Bd | Inoqula\+ | - |
| Bd | Kiestra Tla | - |
| Bd | Kiestra Wca | - |
Related Weaknesses (CWE)
References
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-142-01Third Party AdvisoryUS Government Resource
- https://www.bd.com/en-us/support/product-security-and-privacy/product-security-bVendor Advisory
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-142-01Third Party AdvisoryUS Government Resource
- https://www.bd.com/en-us/support/product-security-and-privacy/product-security-bVendor Advisory
FAQ
What is CVE-2018-10593?
CVE-2018-10593 is a vulnerability with a CVSS score of 5.6 (MEDIUM). A vulnerability in DB Manager version 3.0.1.0 and previous and PerformA version 3.0.0.0 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, ...
How severe is CVE-2018-10593?
CVE-2018-10593 has been rated MEDIUM with a CVSS base score of 5.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-10593?
Check the references section above for vendor advisories and patch information. Affected products include: Bd Database Manager, Bd Performa, Bd Reada, Bd Inoqula\+, Bd Kiestra Tla.