CVE-2020-10598

State: Published
Severity: Not scored
Published: Apr 1, 2020
Updated: Aug 4, 2024
Reserved: Mar 16, 2020

Description

In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia (PAS) ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in access to sensitive data.

Scores

The record has no CVSS score.

Weaknesses

CWE-693 PROTECTION MECHANISM FAILURE CWE-693

Affected Products

Product	Versions
Pyxis MedStation ES SystemBecton, Dickinson and Company (BD)	v1.6.1Affected
Pyxis Anesthesia (PAS) ES SystemBecton, Dickinson and Company (BD)	v1.6.1Affected

References

https://www.us-cert.gov/ics/advisories/icsma-20-091-01

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.