Technical impact
Dräger Infinity Delta, Delta XL, and Kappa patient monitors are vulnerable to a denial‑of‑service flaw triggered by carefully crafted network packets. The malformed packet causes the device to reboot and, upon reboot, the monitor reverts to its default configuration, losing network connectivity and disrupting continuous patient monitoring. The issue arises from improper validation of incoming network data, identified as CWE‑15.
Affected Systems
The affected devices are the Dräger Infinity Delta, Delta XL, and Kappa patient monitors. No specific firmware or model numbers are supplied, so all current units within these product lines are potentially vulnerable unless they run an updated firmware that includes the fix.
Risk and Exploitability
The CVSS score of 7.1 marks this vulnerability as high‑severity. The EPSS score is stated as less than 1 %, indicating a very low but nonzero probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog, so no widespread exploit activity has been reported yet. Attackers would need remote network access to the device, a condition inferred from the description of sending malformed packets over the network; once achieved, they can repeatedly trigger reboots, creating a persistent denial‑of‑service condition that could threaten patient safety if the monitor fails to recover promptly.
