PT-2019-9702 · Drager · Drager Infinity Delta+3

Published 2019-01-28 · Updated 2019-10-09 · CVE-2018-19010

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Drager Infinity Delta versions all Drager Delta XL versions all Drager Kappa versions all Drager Infinity Explorer C700 versions all

Description A malformed network packet may cause the monitor to reboot. By repeatedly sending the malformed network packet, an attacker may be able to disrupt patient monitoring by causing the monitor to repeatedly reboot until it falls back to default configuration and loses network connectivity.

Recommendations For Drager Infinity Delta, update to a version that includes a fix for the malformed network packet issue. For Drager Delta XL, update to a version that includes a fix for the malformed network packet issue. For Drager Kappa, update to a version that includes a fix for the malformed network packet issue. For Drager Infinity Explorer C700, update to a version that includes a fix for the malformed network packet issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-19010

Affected Products

Drager Delta Xl

Drager Infinity Delta

Drager Infinity Explorer C700

Drager Kappa

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-19010 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01 · Note
• http://securityfocus.com/bid/106683 · Note