CVE-2014-5423 — LOW (1.9) — White Hats Nepal

Vulnerability Description

CareFusion Pyxis SupplyStation 8.1 with hardware test tool before 1.0.16 allows local users to obtain potentially sensitive information by reading a temporary (1) debugging file or (2) developer file.

CVSS Score

1.9

LOW

AV:L/AC:M/Au:N/C:P/I:N/A:N

Confidentiality

PARTIAL

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Carefusion	Pyxis Supplystation	8.1

Related Weaknesses (CWE)

CWE-255

References

https://ics-cert.us-cert.gov/advisories/ICSA-14-288-01US Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-14-288-01US Government Resource

FAQ

What is CVE-2014-5423?

CVE-2014-5423 is a vulnerability with a CVSS score of 1.9 (LOW). CareFusion Pyxis SupplyStation 8.1 with hardware test tool before 1.0.16 allows local users to obtain potentially sensitive information by reading a temporary (1) debugging file or (2) developer file.

How severe is CVE-2014-5423?

CVE-2014-5423 has been rated LOW with a CVSS base score of 1.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-5423?

Check the references section above for vendor advisories and patch information. Affected products include: Carefusion Pyxis Supplystation.