CVE-2018-19010

MEDIUM

Draeger Infinity Delta, Delta XL, Kappa, and Infinity Explorer C700 - Denial of Service via Malformed Network Packet

Title source: llm
STIX 2.1

Description

Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. A malformed network packet may cause the monitor to reboot. By repeatedly sending the malformed network packet, an attacker may be able to disrupt patient monitoring by causing the monitor to repeatedly reboot until it falls back to default configuration and loses network connectivity.

References (2)

Core 2
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/106683

Scores

CVSS v3 6.5
EPSS 0.0076
EPSS Percentile 50.8%
Attack Vector ADJACENT_NETWORK
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-20
Status published
Products (4)
draeger/delta_xl_firmware
draeger/infinity_delta_firmware
draeger/infinity_explorer_c700_firmware
draeger/kappa_firmware
Published Jan 28, 2019
Tracked Since Feb 18, 2026