CVE-2019-25720

MediumCVSS 6.5

Published: 03/06/2026(UTC)Updated: 22/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

Dräger SC monitoring devices (models 6002XL, 6802XL, 7000, 8000, 9000 XL) in all software versions have a DoS vulnerability. An unauthenticated attacker can send a malformed network packet causing the monitor to reboot. Repeated attacks can disrupt patient monitoring until network connectivity is lost.

Risk Assessment

The attack can interrupt patient monitoring continuity, posing a direct threat to patient health and life in hospital settings.

Recommendation

Contact the manufacturer for patches. Restrict network access to the devices to trusted hosts and network segments only.

Other vulnerabilities in Dräger SC Monitoring Devices

CVE-2019-25722High
Dräger SC monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain hard-coded plaintext credentials in source code and a denial-of-service vulnerability, allowing local and remote attackers to compromise device integrity across all software versions. A local attacker with direct device access can use hard-coded credentials to access service and clinical accounts and alter device configuration, while a remote attacker can send malformed network packets to cause repeated device reboots, resulting in loss of network connectivity and disruption of patient monitoring.

Original NVD description (English source)

Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain a denial-of-service vulnerability in all software versions that allows unauthenticated attackers to reboot the monitor by sending a malformed network packet. Attackers can repeatedly send such malformed packets to disrupt patient monitoring until the device falls back to default configuration and loses network connectivity.