The vulnerability in Dräger Perseus A500 software versions 2.00 through 2.02 results from improper handling of data received on the Medibus interface. When an attacker sends specially crafted, non‑Medibus‑compliant data, the device overloads its internal processor and performs a warm restart. This restart causes the ventilation pressure to fall to ambient level, interrupting the patient’s ventilation for multiple seconds before therapy resumes. The primary impact is a function‑disrupting denial of service on a critical medical device that can compromise patient safety.

All Dräger Perseus A500 units running firmware versions 2.00, 2.01, and 2.02 are vulnerable. No other Dräger software versions are listed as affected.

The CVSS score of 6.3 classifies the issue as moderate severity, and the EPSS score is not available, so current exploitation probability is unclear. The vulnerability is not listed in the CISA KEV catalog, which suggests limited or no publicly known exploitation at the time of this analysis. Based on the description, the likely attack vector is external transmission of malicious data over the Medibus interface, which may require physical proximity or access to the interface’s communication channel. Once the attacker succeeds, the device will perform a warm restart, interfering with patient ventilation for a critical period.