PT-2019-9702 · Drager · Drager Infinity Delta+3

Publicado 2019-01-28 · Atualizado 2019-10-09 · CVE-2018-19010

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:A/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Drager Infinity Delta versions all Drager Delta XL versions all Drager Kappa versions all Drager Infinity Explorer C700 versions all

Description A malformed network packet may cause the monitor to reboot. By repeatedly sending the malformed network packet, an attacker may be able to disrupt patient monitoring by causing the monitor to repeatedly reboot until it falls back to default configuration and loses network connectivity.

Recommendations For Drager Infinity Delta, update to a version that includes a fix for the malformed network packet issue. For Drager Delta XL, update to a version that includes a fix for the malformed network packet issue. For Drager Kappa, update to a version that includes a fix for the malformed network packet issue. For Drager Infinity Explorer C700, update to a version that includes a fix for the malformed network packet issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-19010

Produtos afetados

Drager Delta Xl

Drager Infinity Delta

Drager Infinity Explorer C700

Drager Kappa

Referências · 3

• https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01 · Nota
• http://securityfocus.com/bid/106683 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-19010 · Nota de Segurança