Denial-of-Service Vulnerability in Dräger Patient Monitors
CVE-2019-25716
7.1HIGH
Key Information:
- Vendor
Dräger
- Vendor
- CVE Published:
- 1 June 2026
What is CVE-2019-25716?
Dräger Infinity Delta, Delta XL, and Kappa patient monitors are susceptible to a denial-of-service issue that allows remote attackers to disrupt patient monitoring services. By sending specially crafted malformed network packets, attackers can trigger a reboot of the device, which leads to a temporary loss of monitoring capabilities. Repeated attacks can push the devices to revert to their default settings, resulting in complete network disconnection and compromised patient safety.
Affected Version(s)
Infinity Delta all software versions
Infinity Delta XL all software versions
Infinity Kappa all software versions
References
CVSS V4
Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Marc Ruef and Rocco Gagliardi, scip AG
