Privilege Escalation in Dräger Infinity Explorer C700 Device

CVE-2019-25718

What is CVE-2019-25718?

The Dräger Infinity Explorer C700 exhibits a vulnerability that permits unauthorized users to escape from kiosk mode, gaining access to the device's underlying operating system. This exploit hinges on a specific dialog interaction, enabling attackers to manipulate the system to display inaccurate or no data from the associated Delta Family patient monitor. This breach poses significant risks to data integrity and operational continuity, highlighting the importance of securing medical devices against unauthorized access and exploitation.

References