The vulnerability permits unauthenticated network attackers to read log files stored on Dräger Infinity Delta, Delta XL, and Kappa patient monitors. These logs contain device internals, location data, and wired network configuration details, which, if accessed, could expose sensitive operational information and enable further reconnaissance. Thus the primary impact is confidentiality compromise.

Systems affected are Dräger Infinity Delta, Infinity Delta XL, and Infinity Kappa patient monitors. No specific firmware or software version details are provided, so any unit running these hardware models is potentially vulnerable.

The CVSS score of 5.3 indicates moderate severity, but the absence of an EPSS value means the current exploitation probability is unknown. The vulnerability is not listed in the CISA KEV catalog. Attackers can exploit the flaw from any network location that can reach the monitor, the interface type (wired or wireless) is not specified in the CVE data, so it is inferred that the typical attack vector involves local wired access. This inference is not confirmed by the CVE source.