Medium 6.5HealthcarePublished Jun 1, 2026

CVE-2019-25716Dräger Infinity Delta/Kappa Patient Monitor DoS via Malformed Network Packet

Updated under an hour ago (2026-10-19 07:10 UTC)

Does this affect you?

It affects Dräger Infinity Delta and 5 other products. Add what you run to find out whether that includes you.

EPSS puts the chance of exploitation in the next 30 days at 0.41%, higher than 34% of scored CVEs.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Dräger Infinity Delta

Exploited in the last 30 days

Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain a denial-of-service vulnerability that allows remote attackers to cause the monitor to reboot by sending a malformed network packet. Attackers can repeatedly send malformed network packets to disrupt patient monitoring until the device falls back to default configuration and loses network connectivity.

CVSS: 6.5 MEDIUM (v3.1, CNA)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): CWE-15
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): 0.41% (percentile 34)
Assigned by: VulnCheck
NVD analysis: Analyzed
Record last updated: Jul 15, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Dräger Infinity Delta drager:infinity_delta (from the name)	Infinity Delta	CNA record
Dräger Infinity Delta XL drager:infinity_delta_xl (from the name)	Infinity Delta XL	CNA record
Dräger Infinity Kappa drager:infinity_kappa (from the name)	Infinity Kappa	CNA record
draeger infinity_delta_firmware draeger:infinity_delta_firmware	all versions	NVD
draeger delta_xl_firmware draeger:delta_xl_firmware	all versions	NVD
draeger kappa_firmware draeger:kappa_firmware	all versions	NVD

References

https://static.draeger.com/security/download/2019-01-22-draeger-infinity-delta-vf10-1-security-advisory.pdfvendor-advisory
https://www.vulncheck.com/advisories/dr-ger-infinity-delta-kappa-patient-monitor-dos-via-malformed-network-packetthird-party-advisory, vdb-entry

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.