Dräger ICMHelper Privilege Escalation Vulnerability

A vulnerability exists in the Dräger ICMHelper service, specifically in versions through 1.4.0.1. This vulnerability allows a low privileged local attacker to exploit the service by using a hardcoded cryptographic key, potentially leading to unauthorized execution of operating system commands with elevated privileges.

Impact

Exploitation of this vulnerability could allow a low privileged local attacker to execute operating system commands with the highest privileges, potentially leading to unauthorized access or modification of system resources.

Remediation

The vulnerability has been fixed in ICMHelper version 2.0.1.0.