# CVE-2025-15653: Dräger Zeus Anesthesia Workstations software integrity compromise via USB

Source: https://junglewise.ai/threats/cve-2025-15653-drager-zeus-anesthesia-workstations-software-integrity-compromise  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-02. Updated: 2026-06-02  
License: CC BY 4.0 with a link back

CVE-2025-15653 · Severity: medium · CVSS 6.8 · Published 2026-06-02

Dräger Zeus anesthesia workstations, used in surgical environments to deliver anesthesia and monitor patients, contain a security flaw in their physical USB ports. An unauthorized person with physical access to the device could use these ports to interfere with medical therapy, alter patient data, or use the workstation as a gateway to attack the hospital's internal network. This could lead to life-critical equipment failure or the compromise of sensitive medical information.

Vendors: [Dräger](https://junglewise.ai/threats/vendors/dr-ger).

## Quick answers

**Is CVE-2025-15653 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-15653 being exploited in the wild.

**How severe is CVE-2025-15653?** Medium severity, with a CVSS score of 6.8, published 2 June 2026.

**Which products and versions are affected?** Dräger Zeus Infinity Empowered All versions; Dräger Zeus RS C500 All versions.

**Is there a fix for CVE-2025-15653?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2025-15653 attacked?** It is attacked with physical access, in a network appliance.

**Am I affected by CVE-2025-15653?** Check whether you run Dräger Zeus Infinity Empowered or Dräger Zeus RS C500 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The Dräger Zeus IE and Zeus RS C500 anesthesia workstations suffer from an exposure of resource to wrong sphere (CWE-668) due to unprotected USB interfaces. An attacker with physical access can manipulate these interfaces to compromise software integrity without requiring prior authentication. Successful exploitation allows an attacker to impair therapy functions, manipulate device-processed data, or utilize the workstation as a pivot point for lateral movement within the connected hospital network or Dräger Service Connect. The vulnerability affects all versions of the Zeus IE and Zeus RS C500 models.

## Affected products

- Dräger Zeus Infinity Empowered (Zeus IE) All versions
- Dräger Zeus RS C500 All versions

## Timeline

- 2026-06-02: advisory: Vulnerability disclosed by VulnCheck and NVD

## References

- [https://www.draeger.com/security](https://www.draeger.com/security)
- [https://www.vulncheck.com/advisories/dr-ger-zeus-ie-anesthesia-workstation-usb-interface-privilege-escalation](https://www.vulncheck.com/advisories/dr-ger-zeus-ie-anesthesia-workstation-usb-interface-privilege-escalation)