CVE-2018-19014

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-01-28 · updated 2026-06-17
Weakness: CWE-532

Description

Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. Log files are accessible over an unauthenticated network connection. By accessing the log files, an attacker is able to gain insights about internals of the patient monitor, the location of the monitor, and wired network configuration.

Affected products

Draeger Delta Xl Firmware: all versions
Draeger Infinity Delta Firmware: all versions
Dräger Infinity Explorer C700: all versions
Draeger Kappa Firmware: all versions

References

http://www.securityfocus.com/bid/106683
https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01
http://www.securityfocus.com/bid/106683
https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01

Get alerted when CVE-2018-19014 or the next vulnerability affects your stack