CVE-2019-10959

🗓️ 13 Jun 2019 20:03:44Reported by icscertType

CVE-2019-10959 BD Alaris Gateway Workstation Versions impacted by malicious file uploa

Reporter	Title	Published	Views	Family All 7
CNVD	BD Alaris Gateway Workstation Arbitrary File Upload Vulnerability	21 Jun 201900:00	–	cnvd
Cvelist	CVE-2019-10959	13 Jun 201920:03	–	cvelist
EUVD	EUVD-2019-2673	7 Oct 202500:30	–	euvd
NVD	CVE-2019-10959	13 Jun 201921:29	–	nvd
Prion	Design/Logic Flaw	13 Jun 201921:29	–	prion
RedhatCVE	CVE-2019-10959	22 May 202504:17	–	redhatcve
ThreatPost	Max-Severity Bug in Infusion Pump Gateway Puts Lives at Risk	13 Jun 201918:41	–	threatpost

NVD

Vulners

Node

bd alaris_gateway_workstation_firmwareMatch1.1.310

bd alaris_gateway_workstation_firmwareMatch1.1.311

bd alaris_gateway_workstation_firmwareMatch1.215

bd alaris_gateway_workstation_firmwareMatch1.3.014

bd alaris_gateway_workstation_firmwareMatch1.3.113

AND

bd alaris_gateway_workstationMatch-

Node

bd alaris_gs_syringe_pump_firmwareRange≤2.3.6

AND

bd alaris_gs_syringe_pumpMatch-

Node

bd alaris_gh_syringe_pump_firmwareRange≤2.3.6

AND

bd alaris_gh_syringe_pumpMatch-

Node

bd alaris_cc_syringe_pump_firmwareRange≤2.3.6

AND

bd alaris_cc_syringe_pumpMatch-

Node

bd alaris_tiva_syringe_pump_firmwareRange≤2.3.6

AND

bd alaris_tiva_syringe_pumpMatch-

[
  {
    "product": "BD Alaris Gateway Workstation",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions, 1.1.3 Build 10, 1.1.3 MR Build 11, 1.2 Build 15, 1.3.0 Build 14, 1.3.1 Build 13, This does not impact the latest firmware Versions 1.3.2 and 1.6.1, Additionally, the following products using software Version 2.3.6 and below, Alaris GS, Alaris GH, Alaris CC, Alaris TIVA"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/108765
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSMA-19-164-01
bd	www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletins/alaris-gateway-workstation-unauthorized-firmware

21 Nov 2024 04:20Current

9.4High risk

Vulners AI Score9.4

CVSS 27.5

CVSS 310

EPSS0.00923

CWE-434