CVE-2019-25720

Dräger SC Monitoring Devices DoS via Malformed Network Packet

Published Jun 3, 2026 CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Description

Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain a denial-of-service vulnerability in all software versions that allows unauthenticated attackers to reboot the monitor by sending a malformed network packet. Attackers can repeatedly send such malformed packets to disrupt patient monitoring until the device falls back to default configuration and loses network connectivity.

Analysis

Technical impact

This vulnerability enables an attacker to send a malformed network packet that triggers an unexpected reboot in Dräger SC monitoring devices. The reboot causes the device to revert to its default configuration and lose network connectivity, disrupting patient monitoring. The effect is a loss of availability of critical monitoring, which can compromise patient safety.

Affected Systems

Affected products include Dräger SC 6002XL, SC 6802XL, SC 7000, SC 8000, and SC 9000 XL across all software versions.

Risk and Exploitability

The CVSS score of 7.1 indicates a moderate to high severity. The EPSS score is not available, so the likelihood of exploitation cannot be quantified, but the attack vector is network-based and does not require authentication, allowing widespread potential exploitation. The vulnerability is not listed in the CISA KEV catalog. An attacker could repeatedly send malformed packets to deny service until the device resets to default settings, severely impacting the availability of patient monitoring.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Dräger

SC 6002XL

unknown

Version	Status	Constraints
`SC 6002XL`	affected	—

Dräger

SC6802XL

unknown

Version	Status	Constraints
`SC6802XL`	affected	—

Dräger

SC 7000

unknown

Version	Status	Constraints
`SC 7000`	affected	—

Dräger

SC8000

unknown

Version	Status	Constraints
`SC8000`	affected	—

Dräger

SC90000 XL

unknown

Version	Status	Constraints
`SC90000 XL`	affected	—

No data.

Vendor Product Versions

Draeger

Sc6802xl

Version	Status	Scheme	Platform
`SC6802XL`	affected	generic	—

Draeger

Sc8000

Version	Status	Scheme	Platform
`SC8000`	affected	generic	—

Draeger

Sc90000 Xl

Version	Status	Scheme	Platform
`SC90000 XL`	affected	generic	—

Draeger

Sc 6002xl

Version	Status	Scheme	Platform
`SC 6002XL`	affected	generic	—

Draeger

Sc 7000

Version	Status	Scheme	Platform
`SC 7000`	affected	generic	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Apply the firmware update or patch provided by Dräger as detailed in the official security advisory PDF.
Restrict network access to the SC devices by implementing firewall rules or network segmentation to limit exposure to untrusted sources.
Monitor device logs and reboot events to detect and respond to anomalous activity promptly.

Generated by OpenCVE AI on June 3, 2026 at 18:20 UTC.

Tracking

Advisories

No advisories available

Metrics

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.199% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://static.draeger.com/security/download/2019-11-27-Draeger-SC7000-SC9000-security-advisory-update-v1-5.pdf
https://www.vulncheck.com/advisories/dr-ger-sc-monitoring-devices-dos-via-malformed-network-packet

History

Jun 5, 2026 8:45 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Draeger Draeger sc6802xl Draeger sc8000 Draeger sc90000 Xl Draeger sc 6002xl Draeger sc 7000
Vendors & Products		Draeger Draeger sc6802xl Draeger sc8000 Draeger sc90000 Xl Draeger sc 6002xl Draeger sc 7000

Jun 3, 2026 6:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Jun 3, 2026 5:45 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain a denial-of-service vulnerability in all software versions that allows unauthenticated attackers to reboot the monitor by sending a malformed network packet. Attackers can repeatedly send such malformed packets to disrupt patient monitoring until the device falls back to default configuration and loses network connectivity.
Title		Dräger SC Monitoring Devices DoS via Malformed Network Packet
Weaknesses		CWE-1286
References		https://static.draeger.com/security/download/2019-11-27-Draeger-SC7000-SC9000-security-advisory-update-v1-5.pdf https://www.vulncheck.com/advisories/dr-ger-sc-monitoring-devices-dos-via-malformed-network-packet
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}` cvssV4_0 `{'score': 7.1, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}`