CVE-2019-10962

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-06-13 · updated 2026-06-17
Weakness: CWE-284

Description

BD Alaris Gateway versions, 1.0.13,1.1.3 Build 10,1.1.3 MR Build 11,1.1.5, and 1.1.6, The web browser user interface on the Alaris Gateway Workstation does not prevent an attacker with knowledge of the IP address of the Alaris Gateway Workstation terminal to gain access to the status and configuration information of the device.

Affected products

BD Alaris Gateway Workstation: 1.0.13, 1.1.3-10, 1.1.3-11, 1.1.5, 1.1.6

References

http://www.securityfocus.com/bid/108763
https://ics-cert.us-cert.gov/advisories/ICSMA-19-164-01
http://www.securityfocus.com/bid/108763
https://ics-cert.us-cert.gov/advisories/ICSMA-19-164-01

Get alerted when CVE-2019-10962 or the next vulnerability affects your stack