PT-2026-45811 · Dräger · Sc 6002Xl+4

Published 2026-06-02 · Updated 2026-06-02 · CVE-2019-25722

Mitre

CVSS v3.1

7.6

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain hard-coded plaintext credentials in source code and a denial-of-service vulnerability that allows local and remote attackers to compromise device integrity across all software versions. A local attacker with direct device access can use the hard-coded credentials to access service and clinical accounts and alter device configuration, while a remote attacker can send malformed network packets to cause repeated device reboots, ultimately resulting in loss of network connectivity and disruption of patient monitoring.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2019-25722

Affected Products

Sc 6002Xl

Sc 7000

Sc6802Xl

Sc8000

Sc90000 Xl

References · 3

• https://static.draeger.com/security · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-25722 · Security Note
• https://vulncheck.com/advisories/dr-ger-sc-monitoring-devices-hard-coded-credentials-and-dos · Note