CVE-2019-25722

{"id": "CVE-2019-25722", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2019-25722", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-03T13:15:43.146803Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.6, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 4.7, "exploitabilityScore": 2.8}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.2, "Automatable": "NOT_DEFINED", "attackVector": "ADJACENT", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"vendor": "Dr\u00e4ger", "product": "SC 6002XL", "versions": [{"status": "affected", "version": "SC 6002XL", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Dr\u00e4ger", "product": "SC6802XL", "versions": [{"status": "affected", "version": "SC6802XL", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Dr\u00e4ger", "product": "SC 7000", "versions": [{"status": "affected", "version": "SC 7000", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Dr\u00e4ger", "product": "SC8000", "versions": [{"status": "affected", "version": "SC8000", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Dr\u00e4ger", "product": "SC90000 XL", "versions": [{"status": "affected", "version": "SC90000 XL", "versionType": "custom"}], "defaultStatus": "unknown"}]}], "published": "2026-06-02T20:16:23.690", "references": [{"url": "https://static.draeger.com/security/download/2019-11-27-Draeger-SC7000-SC9000-security-advisory-update-v1-5.pdf", "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/dr-ger-sc-monitoring-devices-hard-coded-credentials-and-dos", "source": "disclosure@vulncheck.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-798"}]}], "descriptions": [{"lang": "en", "value": "Dr\u00e4ger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain hard-coded plaintext credentials in source code and a denial-of-service vulnerability that allows local and remote attackers to compromise device integrity across all software versions. A local attacker with direct device access can use the hard-coded credentials to access service and clinical accounts and alter device configuration, while a remote attacker can send malformed network packets to cause repeated device reboots, ultimately resulting in loss of network connectivity and disruption of patient monitoring."}, {"lang": "es", "value": "Los dispositivos de monitorizaci\u00f3n Dr\u00e4ger SC (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contienen credenciales de texto plano codificadas de forma r\u00edgida en el c\u00f3digo fuente y una vulnerabilidad de denegaci\u00f3n de servicio que permite a atacantes locales y remotos comprometer la integridad del dispositivo en todas las versiones de software. Un atacante local con acceso directo al dispositivo puede usar las credenciales codificadas de forma r\u00edgida para acceder a cuentas de servicio y cl\u00ednicas y alterar la configuraci\u00f3n del dispositivo, mientras que un atacante remoto puede enviar paquetes de red malformados para causar reinicios repetidos del dispositivo, lo que finalmente resulta en la p\u00e9rdida de conectividad de red y la interrupci\u00f3n de la monitorizaci\u00f3n del paciente."}], "lastModified": "2026-07-22T19:10:00.120", "sourceIdentifier": "disclosure@vulncheck.com"}