CVE-2018-19012

Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. Via a specific dialog it is possible to break out of the kiosk mode and reach the underlying operating system. By breaking out of the kiosk mode, an attacker is able to take control of the operating system.

CVSS v3 7.8 HIGH
CVSS v2.0 7.2 HIGH

7.8^/10

CVSS v3 : HIGH

Vector : AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.securityfocus.com/bid/106683	Third Party Advisory VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01	Third Party Advisory US Government Resource

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:draeger:kappa_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:draeger:kappa:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:draeger:infinity_explorer_c700_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:draeger:infinity_explorer_c700:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:draeger:delta_xl_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:draeger:delta_xl:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:o:draeger:infinity_delta_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:draeger:infinity_delta:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-01-28 21:29

Updated : 2024-02-28 16:48

NVD link : CVE-2018-19012

Mitre link : CVE-2018-19012

CVE.ORG link : CVE-2018-19012

JSON object : View

Products Affected

draeger

delta_xl_firmware
infinity_delta_firmware
infinity_delta
kappa
kappa_firmware
delta_xl
infinity_explorer_c700_firmware
infinity_explorer_c700

CWE

NVD-CWE-noinfo CWE-269

Improper Privilege Management

{"id": "CVE-2018-19012", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2019-01-28T21:29:00.253", "references": [{"url": "http://www.securityfocus.com/bid/106683", "tags": ["Third Party Advisory", "VDB Entry"], "source": "ics-cert@hq.dhs.gov"}, {"url": "https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01", "tags": ["Third Party Advisory", "US Government Resource"], "source": "ics-cert@hq.dhs.gov"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "ics-cert@hq.dhs.gov", "description": [{"lang": "en", "value": "CWE-269"}]}], "descriptions": [{"lang": "en", "value": "Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. Via a specific dialog it is possible to break out of the kiosk mode and reach the underlying operating system. By breaking out of the kiosk mode, an attacker is able to take control of the operating system."}, {"lang": "es", "value": "Todas las versiones de los siguientes programas de Drager Infinity Delta: Infinity Delta, Delta XL, Kappa y Infinity Explorer C700. Es posible salir del modo \"kiosk\" mediante un di\u00e1logo espec\u00edfico y lograr llegar al sistema operativo subyacente. La salida del modo \"kiosk\" permite al atacante tomar el control del sistema operativo."}], "lastModified": "2019-10-09T23:37:36.350", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:draeger:kappa_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7808691-D8D7-4BE0-995C-836980A21683"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:draeger:kappa:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "ED40C0B7-16B1-40F9-8BB4-A663DD969746"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:draeger:infinity_explorer_c700_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ACD85169-9127-4017-99BF-A862540358FD"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:draeger:infinity_explorer_c700:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "23628C4D-D7CD-46C1-B3E7-097D68EB689B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:draeger:delta_xl_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3D620EF1-5976-4F2D-B56D-ACE14A4A92C9"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:draeger:delta_xl:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1B3D2079-9DCB-4218-8DF9-E33485D7402A"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:draeger:infinity_delta_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4AF77F47-64CB-44D6-A715-A88E88F5ED4C"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:draeger:infinity_delta:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "882CC533-800F-4813-A4C2-1F4A72724A57"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "ics-cert@hq.dhs.gov"}