Infinity Kappa CVEs and Security Vulnerabilities

CVE-2019-25717

Dräger Infinity Delta/Kappa Patient Monitors Unauthenticated Log File Disclosure

Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain an information disclosure vulnerability that allows unauthenticated network attackers to access log files over a network connection. Attackers can retrieve device internals, location information, and wired network configuration details from the exposed log files.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Draeger

Products

Delta Xl Delta Xl Firmware Infinity Delta and 4 more

CVE-2019-25716

Dräger Infinity Delta/Kappa Patient Monitor DoS via Malformed Network Packet

Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain a denial-of-service vulnerability that allows remote attackers to cause the monitor to reboot by sending a malformed network packet. Attackers can repeatedly send malformed network packets to disrupt patient monitoring until the device falls back to default configuration and loses network connectivity.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed