CVEvulnerability
CVE-2018-19010
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-01-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.5 MEDIUM — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 3.3 LOW — AV:A/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-20
Description
Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. A malformed network packet may cause the monitor to reboot. By repeatedly sending the malformed network packet, an attacker may be able to disrupt patient monitoring by causing the monitor to repeatedly reboot until it falls back to default configuration and loses network connectivity.
Affected configurations
• draeger kappa firmware
• draeger infinity explorer c700 firmware
• draeger delta xl firmware
• draeger infinity delta firmware
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.securityfocus.com/bid/106683 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/106683 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01 Third Party Advisory, US Government Resource