CVE-2018-19012

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-01-28 · updated 2026-06-17
Weakness: CWE-269

Description

Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. Via a specific dialog it is possible to break out of the kiosk mode and reach the underlying operating system. By breaking out of the kiosk mode, an attacker is able to take control of the operating system.

Affected products

Draeger Delta Xl Firmware: all versions
Draeger Infinity Delta Firmware: all versions
Dräger Infinity Explorer C700: all versions
Draeger Kappa Firmware: all versions

References

http://www.securityfocus.com/bid/106683
https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01
http://www.securityfocus.com/bid/106683
https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01

Get alerted when CVE-2018-19012 or the next vulnerability affects your stack