CVE-2019-25716
Last modified
CVE-2019-25716 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain a denial-of-service vulnerability that allows remote attackers to cause the monitor to reboot by sending a malformed network packet. Attackers can repeatedly send malformed network packets to disrupt patient monitoring until the device falls back to default configuration and loses network connectivity.. EPSS estimates a 0.41% chance of exploitation in the next 30 days.
Description
Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain a denial-of-service vulnerability that allows remote attackers to cause the monitor to reboot by sending a malformed network packet. Attackers can repeatedly send malformed network packets to disrupt patient monitoring until the device falls back to default configuration and loses network connectivity.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Draeger | Infinity Delta Firmware | All versions |
| Draeger | Delta Xl Firmware | All versions |
| Draeger | Kappa Firmware | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2019-25716?
How severe is CVE-2019-25716?
How do I fix CVE-2019-25716?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-25710Dolibarr ERP-CRM 8.0.4 contains an SQL injection vulnerabili…9.1
- CVE-2019-25711SpotFTP Password Recover 2.4.2 contains a denial of service …5.5
- CVE-2019-25712BlueAuditor 1.7.2.0 contains a buffer overflow vulnerability…5.5
- CVE-2019-25713MyT-PM 1.5.1 contains an SQL injection vulnerability that al…8.1
- CVE-2019-25714Seeyon OA A8 contains an unauthenticated arbitrary file writ…9.3
- CVE-2019-25715Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2019-25717Dräger Infinity Delta, Delta XL, and Kappa patient monitors …5.3
- CVE-2019-25718Dräger Infinity Explorer C700 contains a privilege escalatio…7.8
- CVE-2019-25719Dräger Infinity Acute Care System and Standalone Infinity M5…8.8
- CVE-2019-2572Vulnerability in the Oracle SOA Suite component of Oracle Fu…
- CVE-2019-25720Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000,…7.1
- CVE-2019-25721Dräger Infinity M300 patient worn monitors with software ver…7.1
Are you affected by CVE-2019-25716?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST