CVE-2019-10962

Name of the Vulnerable Software and Affected Versions BD Alaris Gateway versions 1.0.13, 1.1.3 Build 10, 1.1.3 MR Build 11, 1.1.5, and 1.1.6

Description The web browser user interface on the Alaris Gateway Workstation does not prevent an attacker with knowledge of the IP address of the Alaris Gateway Workstation terminal from gaining access to the status and configuration information of the device.

Recommendations For BD Alaris Gateway version 1.0.13, update to a version that addresses this issue. For BD Alaris Gateway version 1.1.3 Build 10, update to a version that addresses this issue. For BD Alaris Gateway version 1.1.3 MR Build 11, update to a version that addresses this issue. For BD Alaris Gateway version 1.1.5, update to a version that addresses this issue. For BD Alaris Gateway version 1.1.6, update to a version that addresses this issue.