CVE-2019-10962

BD Alaris Gateway versions, 1.0.13,1.1.3 Build 10,1.1.3 MR Build 11,1.1.5, and 1.1.6, The web browser user interface on the Alaris Gateway Workstation does not prevent an attacker with knowledge of the IP address of the Alaris Gateway Workstation terminal to gain access to the status and configuration information of the device.

Score

CVSS 3.1 5.3 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2019-06-13

Last modified

2024-08-04

Weaknesses

CWE-284

Affected products

• Alaris Gateway Workstation Firmware (Bd)

References

• http://www.securityfocus.com/bid/108763
• https://ics-cert.us-cert.gov/advisories/ICSMA-19-164-01