Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. Log files are accessible over an unauthenticated network connection. By accessing the log files, an attacker is able to gain insights about internals of the patient monitor, the location of the monitor, and wired network configuration.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/106683 | Third Party Advisory VDB Entry |
https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
Configuration 4 (hide)
AND |
|
History
No history.
Information
Published : 2019-01-28 22:29
Updated : 2024-02-28 16:48
NVD link : CVE-2018-19014
Mitre link : CVE-2018-19014
CVE.ORG link : CVE-2018-19014
JSON object : View
Products Affected
draeger
- delta_xl_firmware
- kappa_firmware
- infinity_delta
- delta_xl
- infinity_delta_firmware
- infinity_explorer_c700_firmware
- infinity_explorer_c700
- kappa
CWE
CWE-532
Insertion of Sensitive Information into Log File