PT-2019-12102
CVE-2019-10959
·
تاريخ النشر
2019-06-13
·
تاريخ التحديث
2019-10-09
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
BD Alaris Gateway Workstation versions 1.1.3 Build 10 through 1.3.1 Build 13
BD Alaris Gateway Workstation versions 1.3.0 Build 14
Alaris GS version 2.3.6 and below
Alaris GH version 2.3.6 and below
Alaris CC version 2.3.6 and below
Alaris TIVA version 2.3.6 and below
Description
The issue allows the upload of malicious files during a firmware update due to a lack of restrictions.
Recommendations
For BD Alaris Gateway Workstation versions 1.1.3 Build 10 through 1.3.1 Build 13, update to version 1.3.2 or 1.6.1.
For BD Alaris Gateway Workstation version 1.3.0 Build 14, update to version 1.3.2 or 1.6.1.
For Alaris GS version 2.3.6 and below, update to a version above 2.3.6.
For Alaris GH version 2.3.6 and below, update to a version above 2.3.6.
For Alaris CC version 2.3.6 and below, update to a version above 2.3.6.
For Alaris TIVA version 2.3.6 and below, update to a version above 2.3.6.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾