NMIS/BioDose software V22.02 and previous versions contain executable binaries with plain text hard-coded passwords. These hard-coded passwords could allow unauthorized access to both the application and database.
Credits
Joe Dillon reported these vulnerabilities to Mirion Medical.