LIVE FEED
A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident. A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident.
Saturday, October 31, 2026 Issue #499  ·  Est. 2025
Independent brief for device makers
Manufacturers // Dräger

Dräger

Dräger in MedDevice Cyber coverage: 1 story, 1 product named, 3 CVEs, and the company's own disclosures.

Follow DrägerClaim this page
Stories
1
Products named
1
Product CVEs
3
Responses on record
0
Latest story
Jan 22, 2019

Coverage

1 story
01
Vulnerability

Dräger Infinity Delta monitors allow kiosk escape, reboot loops and unauthenticated log access

CISA advisory ICSMA-19-022-01 covers CVE-2018-19010, CVE-2018-19012 and CVE-2018-19014 in Dräger Infinity Delta, Delta XL, Kappa and Infinity Explorer C700 patient monitors, including a kiosk mode breakout rated CVSS v3 8.4. Dräger released VF10.1 software fixes in December 2018.

CISAJan 223 min read

Products in our coverage

Products and threat intel

7

Dräger products with the device attributes their own public documentation states, and the advisories in our coverage that share those attributes.

ProductDevice typeAttributesMatched advisories
Infinity Gateway SuiteSystem, Network And Communication, Physiological Monitors3942
Infinity CentralStation WideMonitor, Physiological, Patient(With Arrhythmia Detection Or Alarms)2334
Babyroo TN300Warmer, Infant Radiant102
Infinity M300Monitor, Physiological, Patient(With Arrhythmia Detection Or Alarms)212
Infinity CentralStation Wide, Infinity M300, Infinity M300+Monitor, Physiological, Patient(With Arrhythmia Detection Or Alarms)171
Infinity Acute Care System (IACS) Monitoring SolutionMonitor, Physiological, Patient(With Arrhythmia Detection Or Alarms)100
Infinity Acute Care System (IACS) Monitoring SystemMonitor, Physiological, Patient(With Arrhythmia Detection Or Alarms)130

CVEs in coverage of Dräger products

CVE-2018-19010 CVE-2018-19012 CVE-2018-19014
← All manufacturers