Vulnerability · Published Jun 2, 2026 · Assigned by VulnCheck

CVE-2024-14036Dräger Core 1.0.5 Denial of Service via Malformed SDC Message

High 7.5

In plain English

A high-severity uncontrolled resource consumption in Core from Dräger. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.3%top 78.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Dräger Core 1.0.5 and Dräger M540 Converter Service 1.0.9 contain a denial of service vulnerability that allows network-adjacent attackers to trigger high CPU load by sending specially crafted, unencrypted SDC messages during the discovery process. Attackers with access to the hospital network can send malformed SDC packets to exhaust CPU resources in the affected process, causing further SDC messages to no longer be processed.

Affected products (as reported)

Vendor	Product	Versions
Dräger	Core	0 – through 1.0.5
Dräger	M540 Converter Service	0 – through 1.0.9

Weakness: CWE-400 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

https://static.draeger.com/security/download/PSA-24-110-1-gSOAP-Product-Security-Advisory.pdf vendor-advisory
https://www.vulncheck.com/advisories/dr-ger-core-denial-of-service-via-malformed-sdc-message third-party-advisory