Rewterz
Rewterz Threat Advisory – CVE-2019-1976 – Cisco Industrial Network Director Configuration Data Information Disclosure Vulnerability
September 5, 2019
Rewterz
Rewterz Threat Advisory – Red Lion Controls Crimson Multiple Vulnerabilities
September 6, 2019

Rewterz Threat Advisory – CVE-2019-13517 – BD Pyxis Privilege Access Vulnerability

Severity

Medium

Analysis Summary

A vulnerability has been identified where existing access privileges are not restricted in coordination with the expiration of access based on active directory user account changes when the device is joined to an AD domain.

Impact

Privilege access of authenticated user

Affected Vendors

  • Becton
  • Dickinson and Company (BD)

Affected Products

  • Pyxis ES Versions 1.3.4 through to 1.6.1
  • Pyxis Enterprise Server
  • with Windows Server Versions 4.4 through 4.12

Remediation

Update to version Version 1.6.1.1