Riskcovery

CVE-2019-25716

Dräger Infinity Delta/Kappa Patient Monitor DoS via Malformed Network Packet

State
Published
Severity
7.1 High
Published
Jun 1, 2026
Updated
Jul 15, 2026
Reserved
Jun 1, 2026

Read the record on cve.org

Description

Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain a denial-of-service vulnerability that allows remote attackers to cause the monitor to reboot by sending a malformed network packet. Attackers can repeatedly send malformed network packets to disrupt patient monitoring until the device falls back to default configuration and loses network connectivity.

Scores

CVSSScoreVectorSource
4.07.1 HighCVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:NVulnCheck
3.16.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HVulnCheck

Weaknesses

  • CWE-15 External Control of System or Configuration Setting

Affected Products

ProductVersions
Infinity DeltaDräger
  • Infinity DeltaAffected
Infinity Delta XLDräger
  • Infinity Delta XLAffected
Infinity KappaDräger
  • Infinity KappaAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.