The vulnerability allows network-based attackers with access to the hospital or Infinity Network to repeatedly trigger device reboots, eventually bringing the monitor into a fail state that requires a manual restart. This causes loss of wireless connectivity, temporary loss of patient monitoring, and interruption of alarm functionality until recovery.

Dräger Infinity M300 patient-worn monitors running software version VG2.x or earlier are affected.

The CVSS score of 7.1 indicates a high impact severity, while the EPSS score is not available and the vulnerability is not listed in KEV. Exploitation requires network access to the device, so an attacker must be present on the hospital or Infinity network. Once triggered, repeated reboots can incapacitate monitoring for multiple patients, creating a significant operational risk.