CVE-2018-19010

Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. A malformed network packet may cause the monitor to reboot. By repeatedly sending the malformed network packet, an attacker may be able to disrupt patient monitoring by causing the monitor to repeatedly reboot until it falls back to default configuration and loses network connectivity.

CVSS v3 6.5 MEDIUM
CVSS v2.0 3.3 LOW

6.5^/10

CVSS v3 : MEDIUM

Vector : AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

3.3^/10

CVSS v2.0 : LOW

Vector : AV:A/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 6.5 / Impact : 2.9

Access Vector ADJACENT_NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://www.securityfocus.com/bid/106683	Third Party Advisory VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01	Third Party Advisory US Government Resource

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:draeger:kappa_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:draeger:kappa:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:draeger:infinity_explorer_c700_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:draeger:infinity_explorer_c700:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:draeger:delta_xl_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:draeger:delta_xl:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:o:draeger:infinity_delta_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:draeger:infinity_delta:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-01-28 22:29

Updated : 2024-02-04 20:03

NVD link : CVE-2018-19010

Mitre link : CVE-2018-19010

CVE.ORG link : CVE-2018-19010

JSON object : View

Products Affected

draeger

infinity_delta_firmware
delta_xl_firmware
kappa
infinity_explorer_c700
kappa_firmware
infinity_delta
delta_xl
infinity_explorer_c700_firmware

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2018-19010", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.3, "accessVector": "ADJACENT_NETWORK", "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.5, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2019-01-28T22:29:00.350", "references": [{"url": "http://www.securityfocus.com/bid/106683", "tags": ["Third Party Advisory", "VDB Entry"], "source": "ics-cert@hq.dhs.gov"}, {"url": "https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01", "tags": ["Third Party Advisory", "US Government Resource"], "source": "ics-cert@hq.dhs.gov"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}, {"type": "Secondary", "source": "ics-cert@hq.dhs.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. A malformed network packet may cause the monitor to reboot. By repeatedly sending the malformed network packet, an attacker may be able to disrupt patient monitoring by causing the monitor to repeatedly reboot until it falls back to default configuration and loses network connectivity."}, {"lang": "es", "value": "Todas las versiones de los siguientes programas de Drager Infinity Delta: Infinity Delta, Delta XL, Kappa e Infinity Explorer C700. Un paquete mal formado podr\u00eda provocar el reinicio del monitor. Mediante el env\u00edo repetido del paquete de red mal formado, un atacante podr\u00eda interrumpir la monitorizaci\u00f3n del paciente, causando el reinicio repetido del monitor hasta que se restablece la configuraci\u00f3n por defecto y pierde conectividad de red."}], "lastModified": "2019-10-09T23:37:36.007", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:draeger:kappa_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7808691-D8D7-4BE0-995C-836980A21683"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:draeger:kappa:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "ED40C0B7-16B1-40F9-8BB4-A663DD969746"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:draeger:infinity_explorer_c700_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ACD85169-9127-4017-99BF-A862540358FD"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:draeger:infinity_explorer_c700:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "23628C4D-D7CD-46C1-B3E7-097D68EB689B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:draeger:delta_xl_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3D620EF1-5976-4F2D-B56D-ACE14A4A92C9"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:draeger:delta_xl:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1B3D2079-9DCB-4218-8DF9-E33485D7402A"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:draeger:infinity_delta_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4AF77F47-64CB-44D6-A715-A88E88F5ED4C"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:draeger:infinity_delta:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "882CC533-800F-4813-A4C2-1F4A72724A57"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "ics-cert@hq.dhs.gov"}