Dräger Infinity Explorer C700 permits an attacker to escape the enforced kiosk mode by interacting with a particular dialog, allowing the attacker to gain full control over the underlying operating system. This flaw, classified as CWE-451, enables malicious actors to override patient information displayed by connected Delta Family patient monitors, potentially causing incorrect or absent data to be shown. The capability to take complete system control introduces substantial risk to patient safety and operational integrity.

The affected product is Dräger Infinity Explorer C700. No additional version or component details are provided in the advisory; thus, all installations of this model are presumed vulnerable as described.

With a CVSS score of 8.6 the vulnerability is considered high severity, yet EPSS data is unavailable and it is not listed in the CISA KEV catalog. The described attack requires interaction with the device's kiosk interface—likely local or requiring an authenticated user—to trigger the dialog that bypasses kiosk mode. Once compromised, an attacker can execute arbitrary commands on the operating system, modify patient data presentation, or cause the device to malfunction.