ID CVE-2018-19012
Summary Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. Via a specific dialog it is possible to break out of the kiosk mode and reach the underlying operating system. By breaking out of the kiosk mode, an attacker is able to take control of the operating system.
References
Vulnerable Configurations
  • cpe:2.3:o:draeger:kappa_firmware:*:*:*:*:*:*:*:*
    cpe:2.3:o:draeger:kappa_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:draeger:kappa:-:*:*:*:*:*:*:*
    cpe:2.3:h:draeger:kappa:-:*:*:*:*:*:*:*
  • cpe:2.3:o:draeger:infinity_explorer_c700_firmware:*:*:*:*:*:*:*:*
    cpe:2.3:o:draeger:infinity_explorer_c700_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:draeger:infinity_explorer_c700:-:*:*:*:*:*:*:*
    cpe:2.3:h:draeger:infinity_explorer_c700:-:*:*:*:*:*:*:*
  • cpe:2.3:o:draeger:delta_xl_firmware:*:*:*:*:*:*:*:*
    cpe:2.3:o:draeger:delta_xl_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:draeger:delta_xl:-:*:*:*:*:*:*:*
    cpe:2.3:h:draeger:delta_xl:-:*:*:*:*:*:*:*
  • cpe:2.3:o:draeger:infinity_delta_firmware:*:*:*:*:*:*:*:*
    cpe:2.3:o:draeger:infinity_delta_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:draeger:infinity_delta:-:*:*:*:*:*:*:*
    cpe:2.3:h:draeger:infinity_delta:-:*:*:*:*:*:*:*
CVSS
Base: 7.2 (as of 09-10-2019 - 23:37)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:L/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid 106683
misc https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01
Last major update 09-10-2019 - 23:37
Published 28-01-2019 - 21:29
Last modified 09-10-2019 - 23:37
Back to Top