CVE-2018-10595
N/A
Published: May 24, 2018 at 04:00 PM UTC
Updated: June 17, 2026 at 01:34 AM UTC
8 products affected across 2 vendorsPerformaReadaDatabase Manager
Using Kiestra and InoqulA systems by Becton, Dickinson and Company?
Get instant alerts when new vulnerabilities affect Kiestra and InoqulA systems - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.4%
Description
A vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor) to issue SQL commands, which may result in loss or corruption of data.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
bd-inoqula (environment) · bd-kiestra-tla (environment) · bd-kiestra-wca (environment)
v ≤ 3.0.0.0
bd-inoqula (environment) · bd-kiestra-tla (environment) · bd-kiestra-wca (environment)
v ≤ 1.1.0.2
bd-inoqula (environment) · bd-kiestra-tla (environment) · bd-kiestra-wca (environment)
Kiestra Tla· Bddevice
80%All versions
Kiestra Wca· Bddevice
80%All versions
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (2)
x_refsource_MISCThird Party AdvisoryUS Government Resource
Source: [email protected]
https://ics-cert.us-cert.gov/advisories/ICSMA-18-142-01x_refsource_CONFIRMVendor Advisory
Source: [email protected]
https://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletin-bd-kiestra-tla-bd-kiestra-wca-bd-inoqulaQuick Info
StatusMODIFIED
CWE
CWE-356CWE-89
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card