CVE-2019-25723
Dräger Perseus A500 2.00-2.02 DoS via Medibus Interface
CVSS Score
4.0
EPSS Score
0.0%
EPSS Percentile
14th
Dräger Perseus A500 software versions 2.00 through 2.02 contains an improper input handling vulnerability that allows external attackers to cause a denial of service by sending specifically crafted non-Medibus-compliant data through the Medibus interface. Attackers can overload the internal processor with malformed data to trigger a warm restart, causing ventilation pressure to drop to ambient level and interrupting ventilation for several seconds before therapy resumes.
| CWE | CWE-1286 |
| Vendor | dräger |
| Product | perseus a500 |
| Published | Jun 2, 2026 |
| Last Updated | Jun 3, 2026 |
Stay Ahead of the Next One
Get instant alerts for dräger perseus a500
Be the first to know when new medium vulnerabilities affecting dräger perseus a500 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
None
Integrity
None
Availability
Low
Affected Versions
Dräger / Perseus A500
2.00 2.01 2.02