CVE-2019-10962: bd alaris_gateway_workstation_firmware Improper Access Control
Vulnerability summary
CVE-2019-10962 is a medium (CVSS 5.3) Improper Access Control vulnerability in bd alaris_gateway_workstation_firmware. EPSS estimates a 1.68% chance of exploitation in the next 30 days, higher than 76.6% of scored vulnerabilities.
Timeline
- 13-06-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
BD Alaris Gateway versions, 1.0.13,1.1.3 Build 10,1.1.3 MR Build 11,1.1.5, and 1.1.6, The web browser user interface on the Alaris Gateway Workstation does not prevent an attacker with knowledge of the IP address of the Alaris Gateway Workstation terminal to gain access to the status and configuration information of the device.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.68%
Chance of exploitation in the next 30 days
Percentile
77%
Versus all other CVEs
30-day change
0.00 pp
From 1.68% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Bd1 product
- alaris_gateway_workstation_firmware1.0.13 | 1.1.3:10 | 1.1.3:11 | 1.1.5 | 1.1.6
1 vendor · 1 product
References
2 links- ics-cert.us-cert.gov/advisories/ICSMA-19-164-01X Refsource MISCMitigationThird Party AdvisoryUS Government Resource