Becton, Dickinson and Company (BD) Alert
3101Warning Date
Severity Level
Warning Number
Target Sector
1 April, 2020
● Medium
2020-1088
HealthCare
Description:
Becton, Dickinson and Company (BD) has released security for a vulnerability in the following products:
- Pyxis MedStation ES System:
- 1.6.1
- Pyxis Anesthesia (PAS) ES System:
- 1.6.1
Threats:
- An attacker could exploit this vulnerability by escape the restricted environment, resulting in access to sensitive data.
Best practice and Recommendations:
BD recommends the following mitigations and compensating controls in order to reduce risk associated with this vulnerability:
- Limit physical access of the Pyxis Medstation ES and Anesthesia (PAS) ES System to only authorized users.
- Isolate impacted systems and only connect them to trusted systems.
- Monitor and investigate unplanned reboots of systems using network monitoring tools provided by IT departments.
For more information: