| CVE ID | CVE-2021-28111 |
| CVSS SCORE | 9.8, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| AFFECTED VENDORS |
Dräger |
| AFFECTED PRODUCTS |
X-dock |
| VULNERABILITY DETAILS |
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dr��ger X-dock. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firmware and filesystem of the display. The firmware and filesystem contain hard-coded default credentials. An attacker can leverage this vulnerability to execute code in the context of root. |
| ADDITIONAL DETAILS |
Dräger has issued an update to correct this vulnerability. More details can be found at:
https://static.draeger.com/security/download/PSA-21-120-1-X-Dock-Product-Security-Advisory.pdf |
| DISCLOSURE TIMELINE |
|
| CREDIT | Anonymous |
