CVE-2018-19010

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-01-28 · updated 2026-06-17
Weakness: CWE-20

Description

Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. A malformed network packet may cause the monitor to reboot. By repeatedly sending the malformed network packet, an attacker may be able to disrupt patient monitoring by causing the monitor to repeatedly reboot until it falls back to default configuration and loses network connectivity.

Affected products

Draeger Delta Xl Firmware: all versions
Draeger Infinity Delta Firmware: all versions
Dräger Infinity Explorer C700: all versions
Draeger Kappa Firmware: all versions

References

http://www.securityfocus.com/bid/106683
https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01
http://www.securityfocus.com/bid/106683
https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01

Get alerted when CVE-2018-19010 or the next vulnerability affects your stack