CVE-2024-14036
7.5 HIGHDräger Core 1.0.5 and Dräger M540 Converter Service 1.0.9 contain a denial of service vulnerability that allows network-adjacent attacker...
Published: 2026-06-02 · Last updated: 2026-06-04
Severity and scoring
- CVSS
- 7.5 HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CWE
- CWE-400
Description
Dräger Core 1.0.5 and Dräger M540 Converter Service 1.0.9 contain a denial of service vulnerability that allows network-adjacent attackers to trigger high CPU load by sending specially crafted, unencrypted SDC messages during the discovery process. Attackers with access to the hospital network can send malformed SDC packets to exhaust CPU resources in the affected process, causing further SDC messages to no longer be processed.
Source: NVD
References
Related CVEs
Same CWE
- CVE-2026-45169 — Idira Privileged Access Manager (PAM) Self-Hosted Vault versions prior to 15.0.3, 14.6.5, 14.2.7, and 14.0.8 exhibit a validation vulnera...
- CVE-2026-44892 — Netty is a network application framework for development of protocol servers and clients (7.5 HIGH)
- CVE-2026-44890 — Netty is a network application framework for development of protocol servers and clients (7.5 HIGH)
- CVE-2026-44250 — Netty is a network application framework for development of protocol servers and clients (7.5 HIGH)
- CVE-2026-45802 — FPDI is a collection of PHP classes that facilitate reading pages from existing PDF documents and using them as templates in FPDF