Dräger Infinity M300 Network-Based Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Dräger Infinity M300 patient-worn monitors running software versions VG2.3.1 and earlier. This vulnerability allows network-adjacent attackers to repeatedly cause device reboots by sending malicious requests over the Infinity Network. Exploitation of this issue forces the device into a fail state that requires a manual restart, leading to a loss of wireless connectivity and disruption of patient monitoring functionality.

Impact

Exploitation of this vulnerability causes the device to reboot, interrupting patient monitoring and wireless connectivity. The device enters a fail state that requires manual intervention to restore functionality.