Information disclosure in Draeger Delta_xl
CVE-2018-19014
Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. Log files are accessible over an unauthenticated network connection. By accessing the log files, an…
EPSS: 0.008 (51.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Draeger Delta_xl
- Draeger Delta_xl_firmware
- Draeger Infinity_delta
- Draeger Infinity_delta_firmware
- Draeger Infinity_explorer_c700
- Draeger Infinity_explorer_c700_firmware
- Draeger Kappa
- Draeger Kappa_firmware
- Ics-cert Dräger Infinity Delta — versions Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions.
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
- ics-cert@hq.dhs.gov (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2018-19014?
- CVE-2018-19014 is a medium-severity vulnerability in Draeger Delta_xl, classified under Insertion of Sensitive Information into Log File. CVSS score: 6.5/10. Published 2019-01-28.
- How severe is CVE-2018-19014?
- Medium severity. CVSS v3 base score is 6.5 out of 10.