PatchTheCVECVE-2019-25717: Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain an information disclosure vulnerability th
CVE-2019-25717 is a medium-severity flaw (CVSS 4.3) affecting infinity delta firmware, delta xl firmware, kappa firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain an information disclosure vulnerability that allows unauthenticated network attackers to access log files over a network connection. Attackers can retrieve device internals, location information, and wired network configuration details from the exposed log files.
Why this priority
- No elevated risk signals yet
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 4.3 (Medium) |
| Attack vector | Adjacent network |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.2% (top 90%) |
| CISA exploited list | No |
| Weakness | CWE-538 |
| Published | 2026-06-02 |
| Last modified | 2026-07-22 |
Last updated 2026-07-22 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2019-25717?
infinity delta firmware: mitigate or apply the listed mitigation; delta xl firmware: mitigate or apply the listed mitigation; kappa firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2019-25717 being exploited?
CVE-2019-25717 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2019-25717 affect?
CVE-2019-25717 affects infinity delta firmware, delta xl firmware, kappa firmware. Severity is medium (CVSS 4.3). Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain an information disclosure vulnerability that allows unauthenticated network attackers to access log files over a network connection. Attackers can retrieve device internals
How urgent is CVE-2019-25717?
Priority 18/100. No elevated risk signals yet.
Related CVEs
- CVE-2019-25716 MEDIUM 6.5 MITIGATE MITIGATE Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain a denial-of-service vulnerability that all