Is CVE-2019-25716 actively exploited?

No active exploitation of CVE-2019-25716 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2019-25716 be exploited remotely?

Partially. CVE-2019-25716 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2019-25716?

CVE-2019-25716 has a CVSS score of 6.5 (MEDIUM).

HOME VULNERABILITIESCVE-2019-25716

MEDIUM

CVE-2019-25716

CWE-15Published: June 1, 2026· Updated: Jun 3, 2026

6.5

CVSS v3.1

EPSS:0.05%probability of exploitation in 30 daysPercentile:14.6th

Official Description

Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain a denial-of-service vulnerability that allows remote attackers to cause the monitor to reboot by sending a malformed network packet. Attackers can repeatedly send malformed network packets to disrupt patient monitoring until the device falls back to default configuration and loses network connectivity.

NVD Source

Technical Analysis

CVE-2019-25716 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 6.5.