CVE-2019-25717

MediumCVSS 4.3

Published: 02/06/2026(UTC)Updated: 22/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

Dräger Infinity Delta, Delta XL, and Kappa patient monitors disclose sensitive information. An unauthenticated network attacker can access log files over a network connection, retrieving device internals, location information, and wired network configuration.

Risk Assessment

Disclosure of internal data and network configuration can aid attackers in further attacks on hospital infrastructure and compromise patient privacy.

Recommendation

Restrict network access to the monitors to authorized hosts only. Contact the manufacturer for security patches.

Other vulnerabilities in Dräger Infinity Patient Monitors

CVE-2019-25716Medium
DoS vulnerability in Dräger Infinity Delta, Delta XL, and Kappa patient monitors. A remote attacker can cause the monitor to reboot by sending a malformed network packet. Repeated attacks can disrupt patient monitoring until network connectivity is lost.

Original NVD description (English source)

Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain an information disclosure vulnerability that allows unauthenticated network attackers to access log files over a network connection. Attackers can retrieve device internals, location information, and wired network configuration details from the exposed log files.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS