Description (CNA)
Dräger Perseus A500 software versions 2.00 through 2.02 contains an improper input handling vulnerability that allows external attackers to cause a denial of service by sending specifically crafted non-Medibus-compliant data through the Medibus interface. Attackers can overload the internal processor with malformed data to trigger a warm restart, causing ventilation pressure to drop to ambient level and interrupting ventilation for several seconds before therapy resumes.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Dräger / Perseus A500 | affected 2.00; affected 2.01; affected 2.02; unaffected 2.03 |
CWE
CWE-1286
References
- https://static.draeger.com/security/download/2020-06-PSA-20-169-01-Security-Advisory-Perseus-A500-SW20n.pdf
- https://www.vulncheck.com/advisories/dr-ger-perseus-a500-dos-via-medibus-interface
ADP enrichment
No English description supplied.
No references supplied.