CVE-2019-25720

Dräger SC Monitoring Devices DoS via Malformed Network Packet

High7.1EPSS 0.20%

Published: 3 Jun 2026
Updated: 3 Jun 2026
Reserved: 2 Jun 2026
Assigned by: VulnCheck

Description

Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain a denial-of-service vulnerability in all software versions that allows unauthenticated attackers to reboot the monitor by sending a malformed network packet. Attackers can repeatedly send such malformed packets to disrupt patient monitoring until the device falls back to default configuration and loses network connectivity.

Scores

CVSS scores of CVE-2019-25720, by who scored it
Scored by	CVSS	Score	Vector
VulnCheckCNA (assigner)	4.0	High7.1	CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
VulnCheckCNA (assigner)	3.1	Medium6.5	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVDNVD · Awaiting Analysis	4.0	High7.1	CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS (exploitation in 30 days): 0.20% · top 90% of all CVEs (5 Nov 2026)
CISA SSVC: Exploitation: none · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.1.

Weakness

CWE-1286 Improper Validation of Syntactic Correctness of Input (opens in a new tab)All about CWE-1286 and its CVEs

Affected products

Dräger · SC 6002XL
- affected SC 6002XL
Dräger · SC6802XL
- affected SC6802XL
Dräger · SC 7000
- affected SC 7000
Dräger · SC8000
- affected SC8000
Dräger · SC90000 XL
- affected SC90000 XL

References (2)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2019-25720](https://trackcve.app/badge/CVE-2019-25720.svg)](https://trackcve.app/cve/CVE-2019-25720)

Record last updated 3 Jun 2026, 17:44 UTC.