Network-based Denial of Service in Dräger Infinity M300 Patient Monitors

CVE-2019-25721

What is CVE-2019-25721?

The Dräger Infinity M300 patient worn monitors with software versions VG2.3.1 and earlier are susceptible to a network-based denial of service vulnerability. This flaw enables attackers positioned on the same network to exploit the device by sending crafted malicious requests, which can cause the monitor to enter a fail state. This results in repeated device reboots, leading to significant interruptions in wireless connectivity and potentially halting critical patient monitoring functions. This vulnerability highlights the importance of securing medical devices to ensure continuous and reliable patient care.

References