CVE-2019-25723: Dräger Perseus a500

Medium severity, CVSS 4.0. EPSS: 0.2% chance of exploitation in the next 30 days.

Dräger Perseus A500 software versions 2.00 through 2.02 contains an improper input handling vulnerability that allows external attackers to cause a denial of service by sending specifically crafted non-Medibus-compliant data through the Medibus interface. Attackers can overload the internal processor with malformed data to trigger a warm restart, causing ventilation pressure to drop to ambient level and interrupting ventilation for several seconds before therapy resumes.

Affected products

• Dräger Perseus a500: version 2.00 only; version 2.01 only; version 2.02 only

Published 2026-06-02. Last modified 2026-07-22.