CVE-2019-10959

Name of the Vulnerable Software and Affected Versions BD Alaris Gateway Workstation versions 1.1.3 Build 10 through 1.3.1 Build 13 BD Alaris Gateway Workstation versions 1.3.0 Build 14 Alaris GS version 2.3.6 and below Alaris GH version 2.3.6 and below Alaris CC version 2.3.6 and below Alaris TIVA version 2.3.6 and below

Description The issue allows the upload of malicious files during a firmware update due to a lack of restrictions.

Recommendations For BD Alaris Gateway Workstation versions 1.1.3 Build 10 through 1.3.1 Build 13, update to version 1.3.2 or 1.6.1. For BD Alaris Gateway Workstation version 1.3.0 Build 14, update to version 1.3.2 or 1.6.1. For Alaris GS version 2.3.6 and below, update to a version above 2.3.6. For Alaris GH version 2.3.6 and below, update to a version above 2.3.6. For Alaris CC version 2.3.6 and below, update to a version above 2.3.6. For Alaris TIVA version 2.3.6 and below, update to a version above 2.3.6.