Description
Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain an information disclosure vulnerability that allows unauthenticated network attackers to access log files over a network connection. Attackers can retrieve device internals, location information, and wired network configuration details from the exposed log files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dräger | Infinity Delta | all software versions | — |
| Dräger | Infinity Delta XL | all software versions | — |
| Dräger | Infinity Kappa | all software versions | — |
References
- https://static.draeger.com/security vendor-advisory
- https://www.vulncheck.com/advisories/dr-ger-infinity-delta-kappa-patient-monitors-unauthenticated-log-file-disclosure third-party-advisory