What’s Vulnerable › Vulnerabilities

CVE-2019-25717: Dräger Infinity Delta/Kappa Patient Monitors Unauthenticated Log File Disclosure

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-06-02 · updated 2026-07-22
• Weakness: CWE-538

Description

Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain an information disclosure vulnerability that allows unauthenticated network attackers to access log files over a network connection. Attackers can retrieve device internals, location information, and wired network configuration details from the exposed log files.

Affected products

• Draeger Delta Xl Firmware: all versions
• Draeger Infinity Delta Firmware: all versions
• Draeger Kappa Firmware: all versions

References

• https://static.draeger.com/security
• https://www.vulncheck.com/advisories/dr-ger-infinity-delta-kappa-patient-monitors-unauthenticated-log-file-disclosure

Get alerted when CVE-2019-25717 or the next vulnerability affects your stack