Beckman Coulter
Vulnerability disclosure program on Self-hosted beckmancoulter.com
- Top reward
- No cash rewards
- Top severity paid
- Not published
- Assets in scope
- 2
- Public CVEs
- 6
- Last change
- No changes yet
At a glance
What to know before you start testing.
- No cash rewards
- A disclosure program: you report for credit, not money.
- Report by email
- [email protected]
- Replies within 5 days
- As the policy promises.
Rewards
What the company's own policy page says it pays.
This program does not pay cash rewards.
- Response
-
Within 5 days
Acknowledge receipt of the submission within five (5) business days
- Hall of fame
-
Yes
if a vulnerability is verified, we will attribute recognition to the researcher reporting it, if requested.
Summarised with AI from the company's policy, read 12 Nov 2026, and checked word for word against it. Read the original
Scope
2 assets you may test, 5 excluded.
Domains 1
- beckman.com
Products and areas 1
- Beckman Coulter products
Out of scope (5)
- www.beckman.com
- www.beckmancoulter.com
- all other non-product systems
- Beckman Coulter marketing websites
- e-commerce sites
Rules
What the policy asks of you, and the bug types it won't reward, quoted from Beckman Coulter's policy.
While testing
-
testing should not be conducted on active products in a clinical setting
-
products subjected to security testing should not subsequently be used in a clinical setting
-
Please do not engage in unauthorized testing of out of scope assets.
-
please refrain from including sensitive information (e.g., sample information, PHI, PII, etc.) as a part of any submissions to Beckman Coulter
-
When conducting your security research, please avoid actions that could cause harm to patients or products.
-
Comply with all laws and regulations in the course of your testing activities.
Summarised with AI from the company's policy, read 12 Nov 2026, and checked word for word against it. Read the original
Changes
Tracked since 11 Nov 2026. Last checked 5 hours ago.
No changes yet. When the rewards or scope move, you will see it here and in the RSS feed.
Public CVEs
Published vulnerabilities in this vendor's products, from the NVD.
| CVE | Summary | Severity | Published |
|---|---|---|---|
| CVE-2022-26238 | The default privileges for the running service Normand Service Manager in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data. | Medium 5.5 | 6 Oct 2022 |
| CVE-2022-26236 | The default privileges for the running service Normand Remisol Advance Launcher in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data. | Medium 5.5 | 6 Oct 2022 |
| CVE-2022-26240 | The default privileges for the running service Normand Message Buffer in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data. | Medium 6.5 | 6 Oct 2022 |
| CVE-2022-26237 | The default privileges for the running service Normand Viewer Service in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data. | Medium 5.5 | 6 Oct 2022 |
| CVE-2022-26239 | The default privileges for the running service Normand License Manager in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows unprivileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data. | Medium 5.5 | 6 Oct 2022 |
| CVE-2022-26235 | A vulnerability was discovered in the Remisol Advance v2.0.12.1 and below for the Normand Message Server. On installation, the permissions set by Remisol Advance allow non-privileged users to overwrite and/or manipulate executables and libraries that run as the elevated SYSTEM user on Windows. | High 7.8 | 6 Oct 2022 |