CVE-2019-25720
Medium · 6.5CVSS
6.5
EPSS
0.2%
Published
Jun 3, 2026
CISA due date
—
The record
Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain a denial-of-service vulnerability in all software versions that allows unauthenticated attackers to reboot the monitor by sending a malformed network packet. Attackers can repeatedly send such malformed packets to disrupt patient monitoring until the device falls back to default configuration and loses network connectivity.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-83611 xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and… CWE-1286
- CVE-2026-72916 Mastodon is a free, open-source social network server based on ActivityPub. CWE-1286
- CVE-2026-0931 Denial-of-service vulnerability in M-Files Server versions before 26.5.16015.3 allows an… CWE-1286
- CVE-2026-55767 Guzzle is an extensible PHP HTTP client. CWE-1286
- CVE-2026-50131 Fedify is a TypeScript library for building federated server apps powered by ActivityPub. CWE-1286
- CVE-2025-8873 On affected platforms running Arista EOS with IPsec configured, a specially crafted… CWE-1286
- CVE-2021-4479 Dräger Atlan A350 versions 1.00 up to and including 1.01 contains an improper input… CWE-1286
- CVE-2019-25723 Dräger Perseus A500 software versions 2.00 through 2.02 contains an improper input… CWE-1286