CVE-2019-25717

5.3 mediumEPSS 0.2%

Medium (5.3) in draeger. EPSS 0.2% chance of exploitation in the next 30 days.

Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain an information disclosure vulnerability that allows unauthenticated network attackers to access log files over a network connection. Attackers can retrieve device internals, location information, and wired network configuration details from the exposed log files.

Severity

CVSS 4.0

5.3 medium

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

4.3 medium

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
CWE: CWE-538
Published: 2026-06-02
Modified: 2026-07-22
Record from: the NVD, synced 2026-10-19

Affected

draeger:delta_xl_firmware
draeger:infinity_delta_firmware
draeger:kappa_firmware

References

https://static.draeger.com/security
https://www.vulncheck.com/advisories/dr-ger-infinity-delta-kappa-patient-monitors-unauthenticated-log-file-disclosure

Check your stack JSON