Summary
The affected BD medical devices utilize a method of software application implementation called kiosk mode. This kiosk mode is vulnerable to local breakouts, which could allow an attacker with physical access to bypass kiosk mode and view and/or modify sensitive data.
Vulnerabilities 1
-
Unscored —
In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia (PAS) ES System v1.6.1, a restricted desktop environment e…
Revision history
-
#1
ICSMA-20-091-01 BD Pyxis MedStation and Anesthesia (PAS) ES System
References
-
ICS Advisory ICSMA-20-091-01 Web Version
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-20-091-01
-
Recommended Practices
https://www.fda.gov/medical-devices/digital-health/cybersecurity
-
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B