# CVE-2019-25720: Dräger SC Monitoring devices denial of service via malformed packet

Source: https://junglewise.ai/threats/cve-2019-25720-drager-sc-monitoring-devices-denial-of-service-via-malformed  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-03. Updated: 2026-06-03  
License: CC BY 4.0 with a link back

CVE-2019-25720 · Severity: medium · CVSS 6.5 · Published 2026-06-03

Dräger SC series patient monitoring devices are used in healthcare settings to track vital signs. A vulnerability allows an attacker on the same local network to remotely crash and reboot these monitors by sending a specifically crafted network packet. Repeated attacks can cause the device to lose network connectivity and revert to default settings, potentially disrupting critical patient care and monitoring operations.

Vendors: [Dräger](https://junglewise.ai/threats/vendors/dr-ger).

## Quick answers

**Is CVE-2019-25720 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2019-25720 being exploited in the wild.

**How severe is CVE-2019-25720?** Medium severity, with a CVSS score of 6.5, published 3 June 2026.

**Which products and versions are affected?** Dräger SC 6002XL All software versions; Dräger SC 6802XL All software versions; Dräger SC 7000 All software versions; Dräger SC 8000 All software versions; and 1 more.

**Is there a fix for CVE-2019-25720?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2019-25720 attacked?** It is attacked from the adjacent network, in a network appliance.

**Am I affected by CVE-2019-25720?** Check whether you run Dräger SC 6002XL, Dräger SC 6802XL, Dräger SC 7000 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A denial-of-service vulnerability exists in Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) due to improper validation of syntactic correctness of input (CWE-1286). An unauthenticated attacker with adjacent network access can trigger a device reboot by sending a malformed network packet. If the attack is sustained, the device may eventually fall back to a default configuration and lose its network connection. The vulnerability affects all software versions of the listed models.

## Affected products

- Dräger SC 6002XL All software versions
- Dräger SC 6802XL All software versions
- Dräger SC 7000 All software versions
- Dräger SC 8000 All software versions
- Dräger SC 9000 XL All software versions

## Timeline

- 2026-06-03: advisory: NVD and VulnCheck published advisory details.

## References

- [https://static.draeger.com/security/download/2019-11-27-Draeger-SC7000-SC9000-security-advisory-update-v1-5.pdf](https://static.draeger.com/security/download/2019-11-27-Draeger-SC7000-SC9000-security-advisory-update-v1-5.pdf)
- [https://www.vulncheck.com/advisories/dr-ger-sc-monitoring-devices-dos-via-malformed-network-packet](https://www.vulncheck.com/advisories/dr-ger-sc-monitoring-devices-dos-via-malformed-network-packet)

## Related threats

- [Dräger SC Monitoring devices hard-coded credentials and DoS](https://junglewise.ai/threats/cve-2019-25722-drager-sc-monitoring-devices-hard-coded-credentials-and-dos)