PT-2020-12227
CVE-2020-10598
·
Published
2020-04-01
·
Updated
2021-09-14
Description by
CVSS 3.1
6.1
MediumMetricsAV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
BD Pyxis MedStation ES System version 1.6.1
BD Pyxis Anesthesia (PAS) ES System version 1.6.1
Description
A restricted desktop environment escape issue exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow a user to escape the restricted environment, resulting in access to sensitive data.
Recommendations
For BD Pyxis MedStation ES System version 1.6.1, consider disabling the kiosk mode functionality until a patch is available.
For BD Pyxis Anesthesia (PAS) ES System version 1.6.1, consider disabling the kiosk mode functionality until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾