Medium severity · published Jan 28, 2019
CVE-2018-19010
Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions
6.5
CVSS
0.8%
EPSS
No
On KEV
Description
Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. A malformed network packet may cause the monitor to reboot. By repeatedly sending the malformed network packet, an attacker may be able to disrupt patient monitoring by causing the monitor to repeatedly reboot until it falls back to default configuration and loses network connectivity.
CVSS vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DI
Dräger Infinity Delta · ICS-CERT
Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. · source: vendor
DX
Delta XL Firmware · Draeger
All versions, or not specified · source: NVD
ID
Infinity Delta Firmware · Draeger
All versions, or not specified · source: NVD
IE
Infinity Explorer C700 Firmware · Draeger
All versions, or not specified · source: NVD
KF
Kappa Firmware · Draeger
All versions, or not specified · source: NVD
Affected product
DI
Dräger Infinity Delta
ICS-CERT
More from Dräger Infinity Delta
7.8
CVE-2018-19012
Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions
6.5
CVE-2018-19014
Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions