Dräger SC Monitoring Devices DoS via Malformed Network Packet
CVE-2019-25720

7.1HIGH

Key Information:

Vendor

Dräger

Status
Sc 6002xl
Sc6802xl
Sc 7000
Sc8000
Vendor
CVE Published:
3 June 2026

What is CVE-2019-25720?

Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain a denial-of-service vulnerability in all software versions that allows unauthenticated attackers to reboot the monitor by sending a malformed network packet. Attackers can repeatedly send such malformed packets to disrupt patient monitoring until the device falls back to default configuration and loses network connectivity.

Affected Version(s)

SC 6002XL SC 6002XL

SC 7000 SC 7000

SC6802XL SC6802XL

References

https://static.draeger.com/security/download/2019-11-27-D...
vendor-advisory
https://www.vulncheck.com/advisories/dr-ger-sc-monitoring...
third-party-advisory

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jeroen Slobbe and Max Grim
.