Vulnerability in Bd Pyxis Anesthesia Station Es
CVE-2020-10598
In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia (PAS) ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in access to sensitive data.
EPSS: 0.003 (26.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.
Affected products
- Bd Pyxis_anesthesia_station_es
- Bd Pyxis_anesthesia_station_es_firmware — versions 1.6.1
- Bd Pyxis_medstation_es
- Bd Pyxis_medstation_es_firmware — versions 1.6.1
- Becton, Dickinson And Company (Bd) Pyxis Anesthesia (Pas) Es System — versions v1.6.1
- Becton, Dickinson And Company (Bd) Pyxis Medstation Es System — versions v1.6.1
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2020-10598?
- CVE-2020-10598 is a medium-severity vulnerability in Bd Pyxis Anesthesia Station Es, classified under Protection Mechanism Failure. CVSS score: 6.1/10. Published 2020-04-01.
- How severe is CVE-2020-10598?
- Medium severity. CVSS v3 base score is 6.1 out of 10.