The vulnerability stems from improper input handling in firmware 1.00 through 1.01 of Dräger Atlan A350. Attackers can send specially crafted non‑Medibus‑compliant data via the Medibus interface, which over‑loads the internal processor. This overload can gradually disrupt device operation over several hours, leading to loss of data transmission, delayed real‑time displays, and a mismatch between displayed airway pressure values and screen curves.

Affected computers are Dräger Atlan A350 devices running firmware 1.00 or 1.01. The vulnerability is limited to the Medibus interface and thus impacts only these devices.

The CVSS score of 6.3 indicates a moderate severity level. The EPSS score of 0.00051 (below 1%) indicates a very low exploitation probability. The vulnerability is not listed in CISA KEV. The likely attack vector is via the Medibus interface, meaning an adversary must have access to that interface—either serial, network, or physical—to send the malicious data. Because the exploit causes a gradual crash, detection may be delayed, extending downtime for potentially many hours.