CVE-2018-19012

Опубликовано: 28 янв. 2019

Источник: nvd

CVSS3: 7.8

CVSS2: 7.2

EPSS Низкий

Описание

Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. Via a specific dialog it is possible to break out of the kiosk mode and reach the underlying operating system. By breaking out of the kiosk mode, an attacker is able to take control of the operating system.

Ссылки

http://www.securityfocus.com/bid/106683
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/106683
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:draeger:kappa_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:draeger:kappa:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:draeger:infinity_explorer_c700_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:draeger:infinity_explorer_c700:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:draeger:delta_xl_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:draeger:delta_xl:-:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

cpe:2.3:o:draeger:infinity_delta_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:draeger:infinity_delta:-:*:*:*:*:*:*:*

EPSS

Процентиль: 21%

0.00067

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-269

NVD-CWE-noinfo

Связанные уязвимости

GHSA-423c-8p99-7j35

CVSS3: 7.8

github

больше 3 лет назад

EPSS

Процентиль: 21%

0.00067

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-269

NVD-CWE-noinfo