Technical impact
The vulnerability permits unauthenticated network attackers to read log files stored on Dräger Infinity Delta, Delta XL, and Kappa patient monitors. These logs contain device internals, location data, and wired network configuration details, which, if accessed, could expose sensitive operational information and enable further reconnaissance. Thus the primary impact is confidentiality compromise.
Affected Systems
Systems affected are Dräger Infinity Delta, Infinity Delta XL, and Infinity Kappa patient monitors. No specific firmware or software version details are provided, so any unit running these hardware models is potentially vulnerable.
Risk and Exploitability
The CVSS score of 5.3 indicates moderate severity, and the EPSS score of 0.00203 (<1%) indicates a very low exploitation probability. The vulnerability is not listed in the CISA KEV catalog. Attackers can exploit the flaw from any network location that can reach the monitor, the interface type (wired or wireless) is not specified in the CVE data, so it is inferred that the typical attack vector involves local wired access. This inference is not confirmed by the CVE source.
