PT-2019-9706 · Drager · Drager Infinity Delta+3

Marc Ruef + 1 · Published 2019-01-28 · Updated 2019-10-09 · CVE-2018-19014

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:A/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Drager Infinity Delta versions all Drager Delta XL versions all Drager Kappa versions all Drager Infinity Explorer C700 versions all

Description The issue allows log files to be accessed over an unauthenticated network connection. This access enables an attacker to gain insights into the internals of the patient monitor, its location, and the wired network configuration.

Recommendations For Drager Infinity Delta, restrict access to log files to prevent unauthorized access. For Drager Delta XL, limit network connections to only necessary and authenticated sources. For Drager Kappa, consider implementing authentication for log file access. For Drager Infinity Explorer C700, secure log files by restricting access to authorized personnel only.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2018-19014

Affected Products

Drager Delta Xl

Drager Infinity Delta

Drager Infinity Explorer C700

Drager Kappa

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-19014 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01 · Note
• http://securityfocus.com/bid/106683 · Note