This vulnerability enables an attacker to send a malformed network packet that triggers an unexpected reboot in Dräger SC monitoring devices. The reboot causes the device to revert to its default configuration and lose network connectivity, disrupting patient monitoring. The effect is a loss of availability of critical monitoring, which can compromise patient safety.

Affected products include Dräger SC 6002XL, SC 6802XL, SC 7000, SC 8000, and SC 9000 XL across all software versions.

The CVSS score of 7.1 indicates a moderate to high severity. The EPSS score is not available, so the likelihood of exploitation cannot be quantified, but the attack vector is network-based and does not require authentication, allowing widespread potential exploitation. The vulnerability is not listed in the CISA KEV catalog. An attacker could repeatedly send malformed packets to deny service until the device resets to default settings, severely impacting the availability of patient monitoring.