# CVE-2019-25716: Dräger Infinity Patient Monitors denial of service via malformed packet

Source: https://junglewise.ai/threats/cve-2019-25716-drager-infinity-patient-monitors-denial-of-service-via-malformed  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-01. Updated: 2026-06-01  
License: CC BY 4.0 with a link back

CVE-2019-25716 · Severity: medium · CVSS 6.5 · Published 2026-06-01

Dräger Infinity patient monitors, which are used in clinical settings to track vital signs, are vulnerable to a remote attack that causes the device to crash and reboot. An attacker on the same local network can repeatedly trigger these reboots, potentially forcing the device to reset to factory defaults and lose network connectivity. This disruption prevents medical staff from receiving real-time patient data, posing a risk to patient safety and clinical operations.

Vendors: [Dräger](https://junglewise.ai/threats/vendors/dr-ger).

## Quick answers

**Is CVE-2019-25716 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2019-25716 being exploited in the wild.

**How severe is CVE-2019-25716?** Medium severity, with a CVSS score of 6.5, published 1 June 2026.

**Which products and versions are affected?** Dräger Infinity Delta; Dräger Infinity Delta XL; Dräger Infinity Kappa.

**Is there a fix for CVE-2019-25716?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2019-25716 attacked?** It is attacked from the adjacent network, in a network appliance.

**Am I affected by CVE-2019-25716?** Check whether you run Dräger Infinity Delta, Dräger Infinity Delta XL or Dräger Infinity Kappa. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A denial-of-service vulnerability exists in the network stack of Dräger Infinity Delta, Delta XL, and Kappa patient monitors. The flaw is triggered by the receipt of a malformed network packet, which causes the device to undergo an unplanned reboot. An attacker with adjacent network access (e.g., on the same hospital subnet) can exploit this without authentication. Repeated exploitation can lead to a persistent denial-of-service state where the device reverts to its default configuration and loses its network connection. The vulnerability is tracked as CWE-15 (External Control of System or Configuration Setting).

## Affected products

- Dräger Infinity Delta
- Dräger Infinity Delta XL
- Dräger Infinity Kappa

## Timeline

- 2026-06-01: advisory: NVD publication date

## References

- [https://static.draeger.com/security](https://static.draeger.com/security)

## Related threats

- [Dräger Infinity Delta and Kappa Information Disclosure in Log Files](https://junglewise.ai/threats/cve-2019-25717-drager-infinity-delta-and-kappa-information-disclosure-in-log)