Login Request a demo
High severity · published Jan 28, 2019
CVE-2018-19012
Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions
7.8
CVSS
0.4%
EPSS
No
On KEV
Description
Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. Via a specific dialog it is possible to break out of the kiosk mode and reach the underlying operating system. By breaking out of the kiosk mode, an attacker is able to take control of the operating system.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DI
Dräger Infinity Delta · ICS-CERT
Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. · source: vendor
DX
Delta XL Firmware · Draeger
All versions, or not specified · source: NVD
ID
Infinity Delta Firmware · Draeger
All versions, or not specified · source: NVD
IE
Infinity Explorer C700 Firmware · Draeger
All versions, or not specified · source: NVD
KF
Kappa Firmware · Draeger
All versions, or not specified · source: NVD
Affected product
DI
Dräger Infinity Delta
ICS-CERT
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-19012
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-19012
Third Party Advisory
http://www.securityfocus.com/bid/106683
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01
More from Dräger Infinity Delta
6.5
CVE-2018-19010
Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions
6.5
CVE-2018-19014
Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions