CVE-2018-19012
High
Description
Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. Via a specific dialog it is possible to break out of the kiosk mode and reach the underlying operating system. By breaking out of the kiosk mode, an attacker is able to take control of the operating system.
SeverityHigh
CVSS7.8
Exploit probability—
ProductDraeger Kappa Firmware
PublishedJan 28, 2019
First seenJan 28, 2019
Weakness typeCWE-269Improper privilege management
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| draeger kappa_firmware | No range specified | — |
| draeger infinity_explorer_c700_firmware | No range specified | — |
| draeger delta_xl_firmware | No range specified | — |
| draeger infinity_delta_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.