Vulnerability in Bd Pyxis Anesthesia Station Es
CVE-2020-10598
In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia (PAS) ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in access to sensitive data.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.
EPSS exploit prediction
EPSS: 0.003 (26.7th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 27th percentile — 26.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000
Affected products
- Bd Pyxis Anesthesia Station Es
- Bd Pyxis Anesthesia Station Es Firmware — versions 1.6.1
- Bd Pyxis Medstation Es
- Bd Pyxis Medstation Es Firmware — versions 1.6.1
- Becton, Dickinson And Company (Bd) Pyxis Anesthesia (Pas) Es System — versions v1.6.1
- Becton, Dickinson And Company (Bd) Pyxis Medstation Es System — versions v1.6.1
Weakness classification (CWE)
References
- www.us-cert.gov/ics/advisories/icsma-20-091-01 (US Government Resource, Third Party Advisory)
Frequently asked questions
- What is CVE-2020-10598?
- CVE-2020-10598 is a medium-severity vulnerability in Bd Pyxis Anesthesia Station Es, classified under Protection Mechanism Failure. CVSS score: 6.1/10. Published 2020-04-01.
- How severe is CVE-2020-10598?
- Medium severity. CVSS v3 base score is 6.1 out of 10.