CVE-2019-25716 Dräger Infinity Delta/Kappa Patient Monitor DoS via Malformed Network Packet
Remote attackers can cause Dräger patient monitors to reboot and lose connectivity by sending malformed network packets, disrupting patient monitoring.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-25716?
CVE-2019-25716 is a high-severity denial of service vulnerability in Dräger Infinity Delta, published on 1 Jun 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain a denial-of-service vulnerability that allows remote attackers to cause the monitor to reboot by sending a malformed network packet. Attackers can repeatedly send malformed network packets to disrupt patient monitoring until the device falls back to default configuration and loses network connectivity.
Weakness: CWE-15
Which versions are affected by CVE-2019-25716?
It affects 3 products.
Products include Draeger Delta Xl Firmware, Draeger Infinity Delta Firmware, Draeger Kappa Firmware.
How do I fix CVE-2019-25716?
No fix has been published for CVE-2019-25716 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2019-25716 being exploited?
There is no known exploitation of CVE-2019-25716 in the wild and no public exploit code.
Other vulnerabilities in Dräger Infinity Delta
- CVE-2018-19012 Security feature bypass in Dräger Infinity Delta
- CVE-2018-19010 Denial of service in Dräger Infinity Delta
- CVE-2018-19014 Information disclosure in Dräger Infinity Delta
- CVE-2019-25717 Dräger Infinity Delta/Kappa Patient Monitors Unauthenticated Log File Disclosure
Sources
Also known as GHSA-x6h5-p8qf-9j76.