CVE-2025-15653 is a local security vulnerability in Dräger Zeus IE and Zeus RS C500 anesthesia workstations. It involves exposure of device resources to an incorrect security sphere due to unprotected USB interfaces. Attackers with physical access can exploit this to compromise software integrity, impair therapy functions, manipulate processed data, or pivot to network-based attacks when the device is network-connected or linked to Dräger Service Connect. The vulnerability is classified under CWE-668 (Exposure of Resource to Wrong Sphere). No vendor advisory or patch information is available at this time.

The vulnerability allows unauthorized individuals with physical access to compromise the integrity of critical medical device software. This can result in impaired therapy functions and manipulated device data, potentially affecting patient care. Additionally, the device could be leveraged as a pivot point for broader network attacks if connected to a network or Dräger Service Connect, increasing the risk of wider compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict physical access to the affected devices and monitor for unauthorized USB interface use. Follow any future vendor instructions for updates or mitigations.