CVE-2018-10593

A vulnerability in DB Manager version 3.0.1.0 and previous and PerformA version 3.0.0.0 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor) to issue SQL commands, which may result in data corruption.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:bd:database_manager:3.0.1.0:*:*:*:*:*:*:*
cpe:2.3:a:bd:performa:*:*:*:*:*:*:*:*
cpe:2.3:a:bd:reada:*:*:*:*:*:*:*:*
OR cpe:2.3:h:bd:inoqula\+:-:*:*:*:*:*:*:*
cpe:2.3:h:bd:kiestra_tla:-:*:*:*:*:*:*:*
cpe:2.3:h:bd:kiestra_wca:-:*:*:*:*:*:*:*

History

21 Nov 2024, 03:41

Type Values Removed Values Added
References () https://ics-cert.us-cert.gov/advisories/ICSMA-18-142-01 - Third Party Advisory, US Government Resource () https://ics-cert.us-cert.gov/advisories/ICSMA-18-142-01 - Third Party Advisory, US Government Resource
References () https://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletin-bd-kiestra-tla-bd-kiestra-wca-bd-inoqula - Vendor Advisory () https://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletin-bd-kiestra-tla-bd-kiestra-wca-bd-inoqula - Vendor Advisory

Information

Published : 2018-05-24 16:29

Updated : 2024-11-21 03:41


NVD link : CVE-2018-10593

Mitre link : CVE-2018-10593

CVE.ORG link : CVE-2018-10593


JSON object : View

Products Affected

bd

  • database_manager
  • kiestra_wca
  • kiestra_tla
  • reada
  • performa
  • inoqula\+
CWE
CWE-356

Product UI does not Warn User of Unsafe Actions

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')