What is CVE-2025-15653?

CVE-2025-15653 is a medium-severity vulnerability in Dräger Zeus Ie, classified under Exposure of Resource to Wrong Sphere. CVSS score: 6.8/10. Published 2026-06-02.

How severe is CVE-2025-15653?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Vulnerability in Dräger Zeus Ie

CVE-2025-15653

Dräger Zeus Infinity Empowered (Zeus IE) and Zeus RS C500 anesthesia workstations contain a local security vulnerability that allows unauthorized individuals with physical access to compromise software integrity via USB interface manipulation. Attackers can exploit the unprotected USB interfaces to impair therapy functions, manipulate device-processed data, or leverage the device as a pivot point for broader network-based attacks when connected to a network or Dräger Service Connect.

EPSS: 0.002 (6.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Dräger Zeus Ie — versions 0
Dräger Zeus Rs C500 — versions 0

Weakness classification (CWE)

CWE-668 — Exposure of Resource to Wrong Sphere

References

disclosure@vulncheck.com (vendor-advisory)
disclosure@vulncheck.com (third-party-advisory)
disclosure@vulncheck.com (vendor-advisory)

Frequently asked questions

What is CVE-2025-15653?: CVE-2025-15653 is a medium-severity vulnerability in Dräger Zeus Ie, classified under Exposure of Resource to Wrong Sphere. CVSS score: 6.8/10. Published 2026-06-02.
How severe is CVE-2025-15653?: Medium severity. CVSS v3 base score is 6.8 out of 10.