BD Pyxis 信任管理问题漏洞

BD Pyxis is a medication management system from Bidi Medical BD. BD Pyxis has a security vulnerability that stems from the use of hard-coded credentials in certain BD Pyxis products. If exploited, a threat participant could gain access to the underlying file system and potentially utilize...

PT-2022-15659

Name of the Vulnerable Software and Affected Versions BD Pyxis affected versions not specified Description The issue involves hardcoded credentials in specific BD Pyxis products. If exploited, this could allow threat actors to gain access to the underlying file system. They could potentially...

CVE-2022-22766: Use of Hard-coded Credentials

Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to the underlying file system and could potentially exploit application files for information that could be used to decrypt application credentials or gain access to electronic...

PT-2022-3932

Name of the Vulnerable Software and Affected Versions BD Pyxis affected versions not specified Description The issue is related to insufficient protection of registration data in BD Pyxis products, which may still operate with default credentials. This could allow threat actors to gain privileged...

CVE-2020-10598

In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia PAS ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in...

CVE-2020-10598

CVE-2020-10598 affects BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia (PAS) ES System v1.6.1. The issue is a restricted desktop environment escape in kiosk mode. Somelike crafted inputs could allow a user with access to escape the restricted environment and access sensitive data. The a...

CVE-2020-10598: Protection Mechanism Failure

In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia PAS ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in...

PT-2020-12227

Name of the Vulnerable Software and Affected Versions BD Pyxis MedStation ES System version 1.6.1 BD Pyxis Anesthesia PAS ES System version 1.6.1 Description A restricted desktop environment escape issue exists in the kiosk mode functionality of affected devices. Specially crafted inputs could...

Pyxis MedStation ES System and Pyxis Anesthesia ES System Information Disclosure Vulnerabilities

The BD Pyxis MedStation ES System and the Pyxis Anesthesia PAS ES System are both products of BD Medical, Inc.The Pyxis MedStation ES System is an automated medication dispensing system that supports decentralized medication management.The Pyxis Pyxis MedStation ES System is an automated medicati...

BD Pyxis MedStation and Pyxis Anesthesia (PAS) ES System

1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION: Low skill level to exploit Vendor: Becton, Dickinson and Company BD Equipment: Pyxis MedStation and Pyxis Anesthesia PAS ES System Vulnerability: Protection Mechanism Failure 2. RISK EVALUATION The affected BD medical devices utilize a method of...

CVE-2019-13517

In Pyxis ES Versions 1.3.4 through to 1.6.1 and Pyxis Enterprise Server, with Windows Server Versions 4.4 through 4.12, a vulnerability has been identified where existing access privileges are not restricted in coordination with the expiration of access based on active directory user account...

CVE-2019-13517

In Pyxis ES Versions 1.3.4 through to 1.6.1 and Pyxis Enterprise Server, with Windows Server Versions 4.4 through 4.12, a vulnerability has been identified where existing access privileges are not restricted in coordination with the expiration of access based on active directory user account...

Design/Logic Flaw

In Pyxis ES Versions 1.3.4 through to 1.6.1 and Pyxis Enterprise Server, with Windows Server Versions 4.4 through 4.12, a vulnerability has been identified where existing access privileges are not restricted in coordination with the expiration of access based on active directory user account...

CVE-2019-13517

In Pyxis ES Versions 1.3.4 through to 1.6.1 and Pyxis Enterprise Server, with Windows Server Versions 4.4 through 4.12, a vulnerability has been identified where existing access privileges are not restricted in coordination with the expiration of access based on active directory user account...

CVE-2019-13517

CVE-2019-13517 affects BD Pyxis ES and Pyxis Enterprise Server. Affected versions: Pyxis ES 1.3.4–1.5.3 (and 1.6.1 noted in some entries) with Windows Server 4.4–4.12 for Pyxis Enterprise Server. Vulnerability type: session fixation (CWE-384) where existing access privileges are not restricted in...

PT-2019-13383

Name of the Vulnerable Software and Affected Versions Pyxis ES versions 1.3.4 through 1.6.1 Pyxis Enterprise Server with Windows Server versions 4.4 through 4.12 Description A vulnerability has been identified where existing access privileges are not restricted in coordination with the expiration...

CVE-2019-13517: Session Fixation

In Pyxis ES Versions 1.3.4 through to 1.6.1 and Pyxis Enterprise Server, with Windows Server Versions 4.4 through 4.12, a vulnerability has been identified where existing access privileges are not restricted in coordination with the expiration of access based on active directory user account...

BD Pyxis Authorization Issues Vulnerability

BD Pyxis is a medication management system from BD Medical BD. An authorization issue vulnerability exists in BD Pyxis ES versions 1.3.4 through 1.6.1 and Pyxis Enterprise Server Windows Server versions 4.4 through 4.12, which can be exploited by an attacker to gain access to a previous user's...

BD Pyxis (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.6 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Becton, Dickinson and Company BD Equipment: Pyxis Vulnerability: Session Fixation 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-19-248-01 BD Pyxis...

BD Pyxis

1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION : Public exploits are available. Vendor : Becton, Dickinson and Company BD Equipment : Certain BD Pyxis Products Vulnerability : Reusing a Nonce 2. RISK EVALUATION Successful exploitation of this vulnerability could allow data traffic manipulation,...