CVE-2018-10595

Name: CVE-2018-10595
Creator: NVD / NIST
Published: 2018-05-24T16:29:00.27+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.41%

Last modified Jun 17, 2026

CVE-2018-10595 is a vulnerability of currently unknown severity. A vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor) to issue SQL commands, which may result in loss or corruption of data.. EPSS estimates a 0.41% chance of exploitation in the next 30 days.

Description

A vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor) to issue SQL commands, which may result in loss or corruption of data.

Metrics

EPSS Probability

0.41%

32.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Bd	Database Manager	3.0.1.0
Bd	Performa	<= 3.0.0.0
Bd	Reada	<= 1.1.0.2

References

https://ics-cert.us-cert.gov/advisories/ICSMA-18-142-01Third Party Advisory, US Government Resource
https://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletin-bd-kiestra-tla-bd-kiestra-wca-bd-inoqulaVendor Advisory
https://ics-cert.us-cert.gov/advisories/ICSMA-18-142-01Third Party Advisory, US Government Resource
https://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletin-bd-kiestra-tla-bd-kiestra-wca-bd-inoqulaVendor Advisory

Timeline

Published: May 24, 2018
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2018-10595?

How severe is CVE-2018-10595?

Severity scoring for CVE-2018-10595 is pending analysis. The EPSS model estimates a 0.41% probability of exploitation in the next 30 days.

How do I fix CVE-2018-10595?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-10595?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST