CVEvulnerability

CVE-2018-19012

7.8 HIGH Published 2019-01-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-01-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-269

Description

Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. Via a specific dialog it is possible to break out of the kiosk mode and reach the underlying operating system. By breaking out of the kiosk mode, an attacker is able to take control of the operating system.

Affected configurations

• draeger kappa firmware • draeger infinity explorer c700 firmware • draeger delta xl firmware • draeger infinity delta firmware

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References