PT-2019-9704 · Drager · Drager Infinity Delta+3

Marc Ruef + 1 · Publicado 2019-01-28 · Atualizado 2019-10-09 · CVE-2018-19012

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Drager Infinity Delta versions all Drager Delta XL versions all Drager Kappa versions all Drager Infinity Explorer C700 versions all

Description The issue allows an attacker to break out of the kiosk mode and reach the underlying operating system via a specific dialog. This enables the attacker to take control of the operating system.

Recommendations For Drager Infinity Delta, update or apply a fix to prevent breaking out of the kiosk mode. For Drager Delta XL, update or apply a fix to prevent breaking out of the kiosk mode. For Drager Kappa, update or apply a fix to prevent breaking out of the kiosk mode. For Drager Infinity Explorer C700, update or apply a fix to prevent breaking out of the kiosk mode.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2018-19012

Produtos afetados

Drager Delta Xl

Drager Infinity Delta

Drager Infinity Explorer C700

Drager Kappa

Referências · 3

• https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01 · Nota
• http://securityfocus.com/bid/106683 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-19012 · Nota de Segurança