Vulnerability Description
Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain hard-coded plaintext credentials in source code and a denial-of-service vulnerability that allows local and remote attackers to compromise device integrity across all software versions. A local attacker with direct device access can use the hard-coded credentials to access service and clinical accounts and alter device configuration, while a remote attacker can send malformed network packets to cause repeated device reboots, ultimately resulting in loss of network connectivity and disruption of patient monitoring.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://static.draeger.com/security/download/2019-11-27-Draeger-SC7000-SC9000-se
- https://www.vulncheck.com/advisories/dr-ger-sc-monitoring-devices-hard-coded-cre
FAQ
What is CVE-2019-25722?
CVE-2019-25722 is a vulnerability with a CVSS score of 7.6 (HIGH). Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain hard-coded plaintext credentials in source code and a denial-of-service vulnerability that allows local and re...
How severe is CVE-2019-25722?
CVE-2019-25722 has been rated HIGH with a CVSS base score of 7.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-25722?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.