Read the docs
TI-2019-15769 Aliases CVE-2019-25718GHSA-gv7p-xf8g-c233

Dräger Infinity Explorer C700 Privilege Escalation via Kiosk Mode Bypass

Priority LOW 38CWE-451Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Spoofing
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-451.

Summary

Dräger Infinity Explorer C700 contains a privilege escalation vulnerability that allows attackers to break out of kiosk mode and access the underlying operating system through a specific dialog interaction. Attackers can exploit this kiosk escape to take control of the operating system and cause the device to display incorrect or no information from the connected Delta Family patient monitor.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00118 1st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
DrägerInfinity Explorer C700Infinity Explorer C700—No fix listedCNA
  • Infinity Explorer C700 VendorDräger Affected Infinity Explorer C700 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:draeger:infinity_explorer_c700_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableDräger
cpe:2.3:h:draeger:infinity_explorer_c700:-:*:*:*:*:*:*:*not specified by NVDRunning onDräger
  • cpe:2.3:o:draeger:infinity_explorer_c700_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Dräger
  • cpe:2.3:h:draeger:infinity_explorer_c700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dräger

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-25718
  2. 2026-10-03 Alias added: GHSA-gv7p-xf8g-c233

References

Advisory 1

  • TI-2018-13476 Improper privilege management in ICS-CERT Dräger Infinity Delta CVSS 3.0HIGH 7.8
  • TI-2018-13478 Sensitive information in log files in ICS-CERT Dräger Infinity Delta CVSS 3.0MEDIUM 6.5
  • TI-2018-13474 Improper input validation in ICS-CERT Dräger Infinity Delta CVSS 3.0MEDIUM 6.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences