CVE-2020-10598

🗓️ 01 Apr 2020 20:59:36Reported by icscertType

In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia (PAS) ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in access to sensitive data

Reporter	Title	Published	Views	Family All 9
CNVD	Pyxis MedStation ES System and Pyxis Anesthesia ES System Information Disclosure Vulnerabilities	1 Apr 202000:00	–	cnvd
Cvelist	CVE-2020-10598	1 Apr 202020:59	–	cvelist
EUVD	EUVD-2020-3046	7 Oct 202500:30	–	euvd
ICS	BD Pyxis MedStation and Pyxis Anesthesia (PAS) ES System	31 Mar 202000:00	–	ics
NVD	CVE-2020-10598	1 Apr 202021:15	–	nvd
OSV	CVE-2020-10598	1 Apr 202021:15	–	osv
Prion	Design/Logic Flaw	1 Apr 202021:15	–	prion
RedhatCVE	CVE-2020-10598	9 Jan 202609:54	–	redhatcve
Trellix	Connected Healthcare: A Cybersecurity Battlefield We Must Win	6 Jun 202200:00	–	trellix

NVD

Vulners

Node

bd pyxis_medstation_es_firmwareMatch1.6.1

AND

bd pyxis_medstation_esMatch-

Node

bd pyxis_anesthesia_station_es_firmwareMatch1.6.1

AND

bd pyxis_anesthesia_station_esMatch-

[
  {
    "product": "Pyxis MedStation ES System",
    "vendor": "Becton, Dickinson and Company (BD)",
    "versions": [
      {
        "status": "affected",
        "version": "v1.6.1"
      }
    ]
  },
  {
    "product": "Pyxis Anesthesia (PAS) ES System",
    "vendor": "Becton, Dickinson and Company (BD)",
    "versions": [
      {
        "status": "affected",
        "version": "v1.6.1"
      }
    ]
  }
]

Source	Link
us-cert	www.us-cert.gov/ics/advisories/icsma-20-091-01

21 Nov 2024 04:55Current

6.1Medium risk

Vulners AI Score6.1

CVSS 23.6

CVSS 3.16.1

EPSS0.00093

CWE-693

cve-2020-10598 bd pyxis medstation anesthesia pas desktop environment escape vulnerability kiosk mode sensitive data security vulnerability