Impact
The vulnerability allows an attacker to send malformed network packets to a Dräger Infinity Delta, Delta XL, or Kappa patient monitor, causing the device to reboot. This results in a temporary loss of patient monitoring and network connectivity until the monitor restores its default configuration, which can seriously compromise patient safety.
Affected Systems
The affected devices are the Dräger Infinity Delta, Dräger Infinity Delta XL, and Dräger Infinity Kappa patient monitors. No specific firmware or model numbers are listed, so all current units of these product lines are potentially vulnerable.
Risk and Exploitability
The CVSS score of 7.1 classifies this as a high‑severity denial‑of‑service flaw. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, indicating no confirmed widespread exploitation yet. The attack requires remote network access to the device and can be repeated by sending malformed packets, forcing the monitor to reboot repeatedly. Without an official patch or workaround, the monitors remain at risk of disruptive reboot cycles that could jeopardize critical patient monitoring services.
OpenCVE Enrichment