CVE-2025-15653

Medium

Description

Dräger Zeus Infinity Empowered (Zeus IE) and Zeus RS C500 anesthesia workstations contain a local security vulnerability that allows unauthorized individuals with physical access to compromise software integrity via USB interface manipulation. Attackers can exploit the unprotected USB interfaces to impair therapy functions, manipulate device-processed data, or leverage the device as a pivot point for broader network-based attacks when connected to a network or Dräger Service Connect.

SeverityMedium

CVSS6.8

Exploit probability—

ProductZeus IE

PublishedJun 2, 2026

First seenJun 2, 2026

Weakness typeCWE-668CWE-668

How to fix

Update

Dräger Zeus IE1.0.5 or later
Dräger Zeus RS C5001.0.9 or later

Vendor advisories

static.draeger.com/security/download/Product-Security-Advisory-25-349-Zeus.pdf

Affected products

Product	Affected versions	Fixed in
Dräger Zeus IE	v < 1.0.5	1.0.5
Dräger Zeus RS C500	v < 1.0.9	1.0.9

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.