Is CVE-2019-25722 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2019-25722 being exploited in the wild.

How severe is CVE-2019-25722?

High severity, with a CVSS score of 7.6, published 2 June 2026.

Which products and versions are affected?

Dräger SC 6002XL All versions; Dräger SC 6802XL All versions; Dräger SC 7000 All versions; Dräger SC 8000 All versions; and 1 more.

Is there a fix for CVE-2019-25722?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2019-25722 attacked?

It is attacked over the network or from the adjacent network or with local access, in a network appliance.

Am I affected by CVE-2019-25722?

Check whether you run Dräger SC 6002XL, Dräger SC 6802XL, Dräger SC 7000 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2019-25722: Dräger SC Monitoring devices hard-coded credentials and DoS

CVE-2019-25722 · Severity: high · CVSS 7.6 · Published 2026-06-02

Dräger SC Monitoring devices, which are used in clinical settings to monitor patient health, contain hard-coded passwords and a flaw that allows for service disruption. An attacker could use these fixed passwords to gain administrative access and change device settings, or send malicious network traffic to force the device to reboot repeatedly. This could lead to a total loss of patient monitoring capabilities, potentially delaying medical intervention or impacting patient safety.

Vendors: Dräger.

Quick answers

Is CVE-2019-25722 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2019-25722 being exploited in the wild.
How severe is CVE-2019-25722?: High severity, with a CVSS score of 7.6, published 2 June 2026.
Which products and versions are affected?: Dräger SC 6002XL All versions; Dräger SC 6802XL All versions; Dräger SC 7000 All versions; Dräger SC 8000 All versions; and 1 more.
Is there a fix for CVE-2019-25722?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2019-25722 attacked?: It is attacked over the network or from the adjacent network or with local access, in a network appliance.
Am I affected by CVE-2019-25722?: Check whether you run Dräger SC 6002XL, Dräger SC 6802XL, Dräger SC 7000 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability consists of two primary issues within Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL). First, hard-coded plaintext credentials (CWE-798) exist in the source code, allowing an attacker with local or adjacent network access to authenticate to service and clinical accounts and modify device configurations. Second, the devices are susceptible to a denial-of-service attack where malformed network packets trigger repeated reboots. These vulnerabilities affect all software versions and can be exploited without user interaction, resulting in a complete loss of availability for patient monitoring services.

Affected products

Dräger SC 6002XL All versions
Dräger SC 6802XL All versions
Dräger SC 7000 All versions
Dräger SC 8000 All versions
Dräger SC 9000 XL All versions

Timeline

2026-06-02: disclosed: Vulnerability published in NVD dataset via VulnCheck.

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.