CVE-2019-25716
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
DoS vulnerability in Dräger Infinity Delta, Delta XL, and Kappa patient monitors. A remote attacker can cause the monitor to reboot by sending a malformed network packet. Repeated attacks can disrupt patient monitoring until network connectivity is lost.
Risk Assessment
Disruption of patient monitoring can lead to serious health consequences, including delayed detection of critical medical events.
Recommendation
Contact the manufacturer for patches or apply recommended mitigations such as network segmentation and access restrictions.
Other vulnerabilities in Dräger Infinity patient monitors
Original NVD description (English source)
Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain a denial-of-service vulnerability that allows remote attackers to cause the monitor to reboot by sending a malformed network packet. Attackers can repeatedly send malformed network packets to disrupt patient monitoring until the device falls back to default configuration and loses network connectivity.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS