PT-2019-9706 · Drager · Drager Infinity Delta+3

Marc Ruef + 1 · Publicado 2019-01-28 · Atualizado 2019-10-09 · CVE-2018-19014

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:A/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Drager Infinity Delta versions all Drager Delta XL versions all Drager Kappa versions all Drager Infinity Explorer C700 versions all

Description The issue allows log files to be accessed over an unauthenticated network connection. This access enables an attacker to gain insights into the internals of the patient monitor, its location, and the wired network configuration.

Recommendations For Drager Infinity Delta, restrict access to log files to prevent unauthorized access. For Drager Delta XL, limit network connections to only necessary and authenticated sources. For Drager Kappa, consider implementing authentication for log file access. For Drager Infinity Explorer C700, secure log files by restricting access to authorized personnel only.

Correção

Insertion into Log File

Enumeração de Fraquezas

CWE-532

Identificadores relacionados

CVE-2018-19014

Produtos afetados

Drager Delta Xl

Drager Infinity Delta

Drager Infinity Explorer C700

Drager Kappa

Referências · 3

• https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01 · Nota
• http://securityfocus.com/bid/106683 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-19014 · Nota de Segurança