CVE-2019-25720

Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain a denial-of-service vulnerability in all software versions that allows unauthenticated attackers to reboot the monitor by sending a malformed network packet. Attackers can repeatedly send such malformed packets to disrupt patient monitoring until the device falls back to default configuration and loses network connectivity.

Score

CVSS 4.0 7.1 High

Status

Awaiting Analysis - disclosure@vulncheck.com

Published

2026-06-03

Last modified

2026-06-03

Weaknesses

CWE-1286

Affected products

• Sc6802xl (Drger)
• Sc8000 (Drger)
• Sc90000 Xl (Drger)
• Sc 6002xl (Drger)
• Sc 7000 (Drger)

References

• https://static.draeger.com/security/download/2019-11-27-Draeger-SC7000-SC9000-security-advisory-update-v1-5.pdf
• https://www.vulncheck.com/advisories/dr-ger-sc-monitoring-devices-dos-via-malformed-network-packet