What is CVE-2020-10598?

CVE-2020-10598 is a medium-severity vulnerability in Bd Pyxis_anesthesia_station_es, classified under Protection Mechanism Failure. CVSS score: 6.1/10. Published 2020-04-01.

How severe is CVE-2020-10598?

Medium severity. CVSS v3 base score is 6.1 out of 10.

Vulnerability in Bd Pyxis_anesthesia_station_es

CVE-2020-10598

In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia (PAS) ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the…

EPSS: 0.003 (25.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.

Affected products

Bd Pyxis_anesthesia_station_es
Bd Pyxis_anesthesia_station_es_firmware — versions 1.6.1
Bd Pyxis_medstation_es
Bd Pyxis_medstation_es_firmware — versions 1.6.1
Becton, Dickinson And Company (Bd) Pyxis Anesthesia (Pas) Es System — versions v1.6.1
Becton, Dickinson And Company (Bd) Pyxis Medstation Es System — versions v1.6.1

Weakness classification (CWE)

CWE-693 — Protection Mechanism Failure

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-10598?: CVE-2020-10598 is a medium-severity vulnerability in Bd Pyxis_anesthesia_station_es, classified under Protection Mechanism Failure. CVSS score: 6.1/10. Published 2020-04-01.
How severe is CVE-2020-10598?: Medium severity. CVSS v3 base score is 6.1 out of 10.