Vulnerability Details : CVE-2018-19012
Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. Via a specific dialog it is possible to break out of the kiosk mode and reach the underlying operating system. By breaking out of the kiosk mode, an attacker is able to take control of the operating system.
Products affected by CVE-2018-19012
- cpe:2.3:o:draeger:kappa_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:draeger:infinity_explorer_c700_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:draeger:delta_xl_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:draeger:infinity_delta_firmware:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2018-19012
0.04%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 8 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2018-19012
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.2
|
HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
3.9
|
10.0
|
NIST | |
|
7.8
|
HIGH | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
1.8
|
5.9
|
NIST |
CWE ids for CVE-2018-19012
-
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.Assigned by: ics-cert@hq.dhs.gov (Secondary)
References for CVE-2018-19012
-
http://www.securityfocus.com/bid/106683
Multiple Dräger Products Multiple Security VulnerabilitiesThird Party Advisory;VDB Entry
-
https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01
Dräger Infinity Delta | CISAThird Party Advisory;US Government Resource
Jump to