6.5med
CVE-2018-19010
Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions.
Published 7 y ago · modified 4 mo ago · JSON
CVSS
6.5
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.8%
percentile 56%
Public exploits
0
none known
Summary
Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. A malformed network packet may cause the monitor to reboot. By repeatedly sending the malformed network packet, an attacker may be able to disrupt patient monitoring by causing the monitor to repeatedly reboot until it falls back to default configuration and loses network connectivity.
Exploit prediction (EPSS)
0.76% probability of exploitation in the next 30 days, higher than 56% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 6.5 | CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVD | 2.0 | 3.3 | AV:A/AC:L/Au:N/C:N/I:N/A:P |
Affected products
- ICS-CERT Dräger Infinity Delta
Classification
- Weakness
- CWE-20 Improper Input Validation
References
- ics-cert.us-cert.gov /advisories/ICSMA-19-022-01 · x_refsource_MISC, x_transferred
- securityfocus.com /bid/106683 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2018-19010
- NVD: CVE-2018-19010
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.