This vulnerability (CWE-400) in Dräger Core and M540 Converter Service allows an unauthenticated attacker with network access to the hospital environment to trigger uncontrolled resource consumption. By sending malformed SDC packets during the discovery phase, the attacker causes excessive CPU usage in the affected process, leading to denial of service by halting processing of subsequent SDC messages. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, no privileges or user interaction required, and high impact on availability.

Successful exploitation results in denial of service due to CPU resource exhaustion in the affected Dräger components. This disrupts the processing of SDC messages, potentially impacting hospital device communication and operations relying on these services. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to the affected services to trusted hosts only, and monitor for unusual network traffic patterns involving SDC messages. No official patch or workaround has been published as of now.