CVE-2019-5024
High
Description
A restricted environment escape vulnerability exists in the “kiosk mode” function of Capsule Technologies SmartLinx Neuron 2 medical information collection devices running versions 9.0.3 or lower. A specific series of keyboard inputs can escape the restricted environment, resulting in full administrator access to the underlying operating system. An attacker can connect to the device via USB port with a keyboard or other HID device to trigger this vulnerability.
SeverityHigh
CVSS7.6
Exploit probability—
ProductCapsuletech Smartlinx Neuron 2 Firmware
PublishedApr 11, 2019
First seenApr 11, 2019
Weakness typeCWE-693CWE-693
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| capsuletech smartlinx_neuron_2_firmware | v ≤ 9.0.3 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.