PT-2026-45815 · Dräger · Atlan A350

Published 2026-06-02 · Updated 2026-06-04 · CVE-2021-4479

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Dräger Atlan A350 versions 1.00 through 1.01

Description Improper input handling allows attackers to cause a denial of service by sending specifically crafted non-Medibus-compliant data through the Medibus interface. Transmitting malformed data can overload the internal processor, which gradually disrupts device operation over several hours. This results in loss of data transmission, delayed display of real-time curves, and a deviation between displayed airway pressure values and screen curves.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-1286

Related Identifiers

CVE-2021-4479

Affected Products

Atlan A350

References · 7

• https://static.draeger.com/security/download/2021-05-04-PSA-21-124-1-Security-Advisory-Atlan.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-4479 · Security Note
• https://static.draeger.com/security · Vendor Advisory
• https://twitter.com/CVEnew/status/2061993240664981997 · Twitter Post
• https://vulncheck.com/advisories/dr-ger-atlan-a350-dos-via-medibus-interface · Note
• https://vulncheck.com/advisories/drager-atlan-a350-dos-via-medibus-interface · Note
• https://t.me/cveNotify/166016 · Telegram Post