Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.1

Dräger Patient Monitors Can Crash and Lose Connectivity

CVE-2019-25716 · published 5 months ago
Summary

Certain Dräger patient monitors have a weakness that allows hackers to crash the device and cause it to lose connection with the network. This could disrupt patient care, so it's essential to address this issue by applying the latest software updates and following security guidelines to prevent unauthorized access.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
draeger infinity_delta_firmware All versions
cpe:2.3:o:draeger:infinity_delta_firmware:*:*:*:*:*:*:*:*
draeger delta_xl_firmware All versions
cpe:2.3:o:draeger:delta_xl_firmware:*:*:*:*:*:*:*:*
draeger kappa_firmware All versions
cpe:2.3:o:draeger:kappa_firmware:*:*:*:*:*:*:*:*
dräger infinity delta Infinity Delta
dräger infinity delta xl Infinity Delta XL
dräger infinity kappa Infinity Kappa
Original advisory text
Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain a denial-of-service vulnerability that allows remote attackers to cause the monitor to reboot by sending a malformed network pack...
Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain a denial-of-service vulnerability that allows remote attackers to cause the monitor to reboot by sending a malformed network packet. Attackers can repeatedly send malformed network packets to disrupt patient monitoring until the device falls back to default configuration and loses network connectivity.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
7.1 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-15External Control of System or Configuration Setting
Timeline
Published1 Jun 2026
Updated4 Nov 2026
First seen1 Jun 2026
Sources
CVE-2019-25716 · NVD
CVE-2019-25716 · MITRE
Track software like this
Free during beta