PT-2026-43357 · Eppendorf · Bioflo 320

Published 2026-05-26 · Updated 2026-06-01 · CVE-2026-7251

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Eppendorf BioFlo 320 (affected versions not specified)

Description The VNC server uses a hard-coded password. A remote attacker who knows the network address of a device with remote access enabled can use this password to gain full control of the user interface and all control panel features. VNC traffic is not encrypted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-259

Related Identifiers

CVE-2026-7251

Affected Products

Bioflo 320

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-7251 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-146-01.json · Note
• https://twitter.com/the_yellow_fall/status/2061246096664363312 · Twitter Post
• https://cisa.gov/news-events/ics-medical-advisories/icsma-26-146-01 · Note
• https://eppendorf.com/software-downloads · Note
• https://twitter.com/CVEnew/status/2059337192263020822 · Twitter Post