Dräger ICMHelper Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the Dräger ICMHelper service, affecting versions through 1.4.0.1. This vulnerability allows a low privileged local attacker to execute operating system commands with elevated privileges. The exploitation of this vulnerability could lead to unauthorized access to the application, sensitive information, and client system and server resources. Successful exploitation of this vulnerability requires prior exploitation of CVE-2025-2810.

Impact

Exploitation of this vulnerability could allow a low privileged local attacker to execute operating system commands with elevated privileges, potentially leading to unauthorized access to application data, sensitive information, and resources on the client system and server.

Remediation

The vulnerability has been fixed in ICMHelper version 2.0.1.0.