CVE-2019-10962

Опубликовано: 13 июн. 2019

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

BD Alaris Gateway versions, 1.0.13,1.1.3 Build 10,1.1.3 MR Build 11,1.1.5, and 1.1.6, The web browser user interface on the Alaris Gateway Workstation does not prevent an attacker with knowledge of the IP address of the Alaris Gateway Workstation terminal to gain access to the status and configuration information of the device.

Ссылки

http://www.securityfocus.com/bid/108763
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSMA-19-164-01
Mitigation
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/108763
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSMA-19-164-01
Mitigation
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:bd:alaris_gateway_workstation_firmware:1.0.13:*:*:*:*:*:*:*

cpe:2.3:o:bd:alaris_gateway_workstation_firmware:1.1.3:10:*:*:*:*:*:*

cpe:2.3:o:bd:alaris_gateway_workstation_firmware:1.1.3:11:*:*:*:*:*:*

cpe:2.3:o:bd:alaris_gateway_workstation_firmware:1.1.5:*:*:*:*:*:*:*

cpe:2.3:o:bd:alaris_gateway_workstation_firmware:1.1.6:*:*:*:*:*:*:*

cpe:2.3:h:bd:alaris_gateway_workstation:-:*:*:*:*:*:*:*

EPSS

Процентиль: 36%

0.0015

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-284

NVD-CWE-Other

Связанные уязвимости

GHSA-r326-v6ph-fqqg