CVE-2019-25720
Denial-of-Service in Dräger SC Monitoring Devices
Publication date: 2026-06-03
Last updated on: 2026-06-03
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| dräger | sc_monitoring_devices | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-1286 | The product receives input that is expected to be well-formed - i.e., to comply with a certain syntax - but it does not validate or incorrectly validates that the input complies with the syntax. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The CVE-2019-25720 vulnerability affects multiple Dräger SC Monitoring devices, including models SC 6002XL, SC 6802XL, SC 7000, SC 8000, and SC 9000 XL.
It is a denial-of-service (DoS) vulnerability caused by improper validation of the syntactic correctness of input (CWE-1286).
Unauthenticated attackers can exploit this vulnerability by sending a malformed network packet to the device.
This causes the monitor to reboot, and repeated attacks can disrupt patient monitoring until the device resets to its default configuration and loses network connectivity.
How can this vulnerability impact me? :
This vulnerability can cause denial-of-service conditions on Dräger SC Monitoring devices, leading to repeated reboots.
As a result, patient monitoring can be disrupted, which may impact patient safety and the reliability of medical monitoring.
Additionally, the device may fall back to default settings and lose network connectivity, potentially causing further operational issues.
What immediate steps should I take to mitigate this vulnerability?
The vulnerability allows unauthenticated attackers to reboot Dräger SC Monitoring devices by sending malformed network packets, causing denial-of-service and device resets to default configurations.
Immediate mitigation steps should include restricting network access to the affected devices to trusted sources only, implementing network-level filtering to block malformed packets, and monitoring for unusual network traffic targeting these devices.
Since the vulnerability affects all software versions and no specific patch information is provided, isolating the devices from untrusted networks and applying strict network controls are critical to reduce exposure.