CVE-2020-10598

· MEDIUMModified

← All CVEs

CVSS v3.1

6.1

EPSS

0.33%

Published

Apr 1, 2020

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia (PAS) ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in access to sensitive data.

CVSS Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weaknesses (CWE)

CWE-693

Affected Products (4)

bd · pyxis_medstation_es_firmwarevulnerable

bd · pyxis_medstation_es

bd · pyxis_anesthesia_station_es_firmwarevulnerable

bd · pyxis_anesthesia_station_es

References (2)

https://www.us-cert.gov/ics/advisories/icsma-20-091-01

Third Party AdvisoryUS Government Resource

https://www.us-cert.gov/ics/advisories/icsma-20-091-01

Third Party AdvisoryUS Government Resource

KEV Catalog EPSS Scores Vendors All CVEs