A network‑based denial of service flaw in Dräger Infinity M300 patient‑worn monitors allows attackers on the same local network to send crafted messages over the Infinity Network and repeatedly trigger an automatic reboot. The reboot forces the device into a fail state that requires a manual restart, resulting in loss of wireless connectivity and an interruption of patient‑monitoring functionality. The impact is a loss of availability and patient safety.

Dräger Infinity M300 patient‑worn monitors running software version VG2.3.1 and earlier are vulnerable.

The CVSS score is 7.1, indicating a medium‑to‑high severity vulnerability. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog. Attackers must be on the same local network as the device and can exploit the flaw without special privileges, simply by sending malicious requests over the Infinity Network. The ability to repeatedly reboot the device poses a significant risk to patient monitoring availability, and therefore to patient safety.