CVE-2020-10598

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia (PAS) ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in access to sensitive data.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-693

Affected software

No affected versions have been published.

Timeline

Published: Apr 1, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-105999.8VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow a vulnerable ActiveX component to be exploited resulting in a buff CVE-2020-10607.5A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt CVE-2020-106007.1An authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure. This can result in bl CVE-2020-106017.8VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure permissions which may allow a loca CVE-2020-106025.3In OSIsoft PI System multiple products and versions, an authenticated remote attacker could crash PI Network Manager due to a race condition CVE-2020-106038.8WebAccess/NMS (versions prior to 3.0.2) does not properly sanitize user input and may allow an attacker to inject system commands remotely.CVE-2020-106047.5In OSIsoft PI System multiple products and versions, a remote, unauthenticated attacker could crash PI Network Manager service through speci CVE-2020-106057.5Grundfos CIM 500 before v06.16.00 responds to unauthenticated requests for password storage files.CVE-2020-106067.8In OSIsoft PI System multiple products and versions, a local attacker can exploit incorrect permissions set by affected PI System software. CVE-2020-106078.8In Advantech WebAccess, Versions 8.4.2 and prior. A stack-based buffer overflow vulnerability caused by a lack of proper validation of the l CVE-2020-106087.8In OSIsoft PI System multiple products and versions, a local attacker can plant a binary and bypass a code integrity check for loading PI Sy CVE-2020-106097.5Grundfos CIM 500 v06.16.00 stores plaintext credentials, which may allow sensitive information to be read or allow modification to system se