CVE-2021-4479CWE-1286

Dräger Atlan A350 1.00 <= 1.01 DoS via Medibus Interface

Medium · published June 2, 2026

CVSS v4.0
6.3
EPSS
0%
Percentile
14.4
In the wild
Unconfirmed
What it is

Dräger Atlan A350 versions 1.00 up to and including 1.01 contains an improper input handling vulnerability that allows attackers to cause a denial of service by sending specifically crafted non-Medibus-compliant data through the Medibus interface. Attackers can transmit malformed data to overload the internal processor, gradually disrupting device operation over several hours and causing loss of data transmission, delayed display of real-time curves, and deviation between displayed airway pressure values and screen curves.

The record
Technical detail
CVSS v4.0
6.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L
EPSS
0.00241 · 14.4th percentile
Weakness
CWE-1286 · Improper Validation of Syntactic Correctness of Input
Published
2026-06-02T19:27Z
EPSS history
Timeline
  • 02 JUN 19:27Z
    Dräger Atlan A350 1.00 <= 1.01 DoS via Medibus Interface
    cvelistv5