The vulnerability arises from improper input handling in software versions 1.00 through 1.01 of Dräger Atlan A350. An attacker may send specifically crafted non‑Medibus‑compliant data through the Medibus interface, causing the internal processor to overload. This can result in a prolonged denial of service, with loss of data transmission, delayed real‑time displays, and inaccurate airway pressure readings.

Affected computers are Dräger Atlan A350 devices running firmware 1.00 or 1.01. The vulnerability is limited to the Medibus interface and thus impacts only these devices.

The CVSS score of 6.3 indicates a moderate severity level. No EPSS score is currently available, so the likelihood of exploitation is unclear. The vulnerability is not listed in CISA KEV. The likely attack vector is via the Medibus interface, meaning an adversary must have access to that interface—either serial, network, or physical—to send the malicious data. Because the exploit causes a gradual crash, detection may be delayed, extending downtime for potentially many hours.