CVE-2018-19012

Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. Via a specific dialog it is possible to break out of the kiosk mode and reach the underlying operating system. By breaking out of the kiosk mode, an attacker is able to take control of the operating system.

• CWE-269

• http://www.securityfocus.com/bid/106683Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/106683Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSMA-19-022-01Third Party Advisory, US Government Resource

Published

Jan 28, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-19007In Geutebrueck GmbH E2 Camera Series versions prior to 1.12.…
• CVE-2018-19008The TextEditor 2.0 in ABB CP400 Panel Builder versions 2.0.7…
• CVE-2018-19009Pilz PNOZmulti Configurator prior to version 10.9 allows an …7.8
• CVE-2018-1901IBM WebSphere Application Server 8.5 and 9.0 could allow a r…5
• CVE-2018-19010Drager Infinity Delta, Infinity Delta, all versions, Delta X…
• CVE-2018-19011CX-Supervisor (Versions 3.42 and prior) can execute code tha…
• CVE-2018-19013An attacker could inject commands to delete files and/or del…
• CVE-2018-19014Drager Infinity Delta, Infinity Delta, all versions, Delta X…
• CVE-2018-19015An attacker could inject commands to launch programs and cre…7.3
• CVE-2018-19016Rockwell Automation EtherNet/IP Web Server Modules 1756-EWEB…
• CVE-2018-19017Several use after free vulnerabilities have been identified …
• CVE-2018-19018An access of uninitialized pointer vulnerability in CX-Super…