Denial-of-Service Vulnerability in Dräger SC Monitoring Devices

CVE-2019-25722

What is CVE-2019-25722?

Dräger SC Monitoring devices, including the SC 6002XL, SC 6802XL, SC 7000, SC 8000, and SC 9000 XL models, are susceptible to severe security vulnerabilities due to hard-coded plaintext credentials embedded in the source code. This flaw enables local attackers with physical access to manipulate service and clinical accounts, altering device settings with ease. Additionally, the devices are vulnerable to a denial-of-service attack, where remote attackers can exploit malformed network packets causing device crashes and continuous reboots. This results in significant disruptions to patient monitoring capabilities and poses a risk to patient safety.

References