Log in / Sign up

Vulnerability details

CVE-2019-25719

Dräger Infinity Acute Care SystemDräger Standalone Infinity M540 patient monitor

Dräger Infinity M540 VG4.1.1 Spoofing and DoS via Network Message Handling

CVSS 4.0
8.8High

Official description

Dräger Infinity Acute Care System and Standalone Infinity M540 patient monitors running software versions VG4.1.1, VG4.0.3, and lower contain network message handling vulnerabilities that allow network-adjacent attackers to spoof or tamper with data and cause denial-of-service conditions. Attackers with access to an enabled Infinity network port or physical proximity to a wireless access point can modify device settings such as alarm states or alarm limits, and overwhelm the system with incoming data causing the device to reboot and lose network functionality.

CVSS scores

ScoreVersionSourceVector
8.8High 4.0 CVEProject cvelistV5 (CNA) (VulnCheck) CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
8.6High 3.1 CVEProject cvelistV5 (CNA) (VulnCheck) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Affected products

VendorProductVersionsSource
Dräger Infinity Acute Care System v ≤ VG4.1.1 CVEProject cvelistV5 (CNA)
Dräger Infinity Acute Care System v ≤ VG4.0.3 CVEProject cvelistV5 (CNA)
Dräger Standalone Infinity M540 patient monitor v ≤ VG4.1.1 CVEProject cvelistV5 (CNA)

References and advisories

2
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2026-06-02
Last updated
2026-06-03
State
Published
Assigner (CNA)
VulnCheck

Exploit prediction (EPSS)

0.13%
Probability of exploitation in 30 days
2.7%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
Yes
Exploitation
None
Technical impact
Partial

Weaknesses (CWE)

  • CWE-924
    Improper Enforcement of Message Integrity During Transmission in a Communication Channel