PT-2026-45811 · Dräger · Sc8000+4

CVE-2019-25722 · Published 2026-06-02 · Updated 2026-06-04

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) (affected versions not specified)

Description These devices contain hard-coded plaintext credentials in the source code and are susceptible to a denial-of-service condition. A local attacker with direct access can utilize these credentials to access service and clinical accounts to modify device configurations. Additionally, a remote attacker can transmit malformed network packets to trigger continuous device reboots, leading to a loss of network connectivity and the disruption of patient monitoring.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2019-25722

Affected Products

Sc 6002Xl

Sc6802Xl

Sc 7000

Sc8000

Sc 9000 Xl

References · 5

• https://static.draeger.com/security/download/2019-11-27-Draeger-SC7000-SC9000-security-advisory-update-v1-5.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-25722 · Security Note
• https://static.draeger.com/security · Vendor Advisory
• https://t.me/cveNotify/166012 · Telegram Post
• https://vulncheck.com/advisories/dr-ger-sc-monitoring-devices-hard-coded-credentials-and-dos · Note