12 matches found
CVE-2025-15653 Dräger Zeus IE Anesthesia Workstation USB Interface Privilege Escalation
Dräger Zeus Infinity Empowered Zeus IE and Zeus RS C500 anesthesia workstations contain a local security vulnerability that allows unauthorized individuals with physical access to compromise software integrity via USB interface manipulation. Attackers can exploit the unprotected USB interfaces to...
CVE-2025-15653
Dräger Zeus Infinity Empowered Zeus IE and Zeus RS C500 anesthesia workstations contain a local security vulnerability that allows unauthorized individuals with physical access to compromise software integrity via USB interface manipulation. Attackers can exploit the unprotected USB interfaces to...
CVE-2025-15653 Dräger Zeus IE Anesthesia Workstation USB Interface Privilege Escalation
Dräger Zeus Infinity Empowered Zeus IE and Zeus RS C500 anesthesia workstations contain a local security vulnerability that allows unauthorized individuals with physical access to compromise software integrity via USB interface manipulation. Attackers can exploit the unprotected USB interfaces to...
CVE-2020-10598
In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia PAS ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in...
floridadentalanesthesia.com Cross Site Scripting vulnerability OBB-3914265
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
BD Pyxis 安全漏洞
BD Pyxis is a medication management system from Biddy Medical BD. A security vulnerability exists in BD Pyxis that stems from the use of default credentials. The following products and versions are affected: BD Pyxis™ Anesthesia Station ES, BD Pyxis™ CIISafe, BD Pyxis™ Logistics, BD Pyxis™ MedBan...
CVE-2020-10598
In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia PAS ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in...
CVE-2020-10598
CVE-2020-10598 affects BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia (PAS) ES System v1.6.1. The issue is a restricted desktop environment escape in kiosk mode. Somelike crafted inputs could allow a user with access to escape the restricted environment and access sensitive data. The a...
Pyxis MedStation ES System and Pyxis Anesthesia ES System Information Disclosure Vulnerabilities
The BD Pyxis MedStation ES System and the Pyxis Anesthesia PAS ES System are both products of BD Medical, Inc.The Pyxis MedStation ES System is an automated medication dispensing system that supports decentralized medication management.The Pyxis Pyxis MedStation ES System is an automated medicati...
BD Pyxis MedStation and Pyxis Anesthesia (PAS) ES System
1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION: Low skill level to exploit Vendor: Becton, Dickinson and Company BD Equipment: Pyxis MedStation and Pyxis Anesthesia PAS ES System Vulnerability: Protection Mechanism Failure 2. RISK EVALUATION The affected BD medical devices utilize a method of...
Bug in Anesthesia Respirators Allows Cyber-Tampering
A vulnerability in GE Healthcare’s Aestiva and Aespire anesthesia devices would allow an unauthenticated cybercriminal on the same network as the device to modify gas composition parameters within the devices’ respirator function, thus changing sensor readings for gas density. According to GE...
GE Aestiva and Aespire Anesthesia (Update A)
1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: GE Equipment: Aestiva and Aespire Anesthesia Vulnerability: Improper Authentication 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSMA-19-190-01 GE...