Deprecated: Hook wp_smush_should_skip_parse is deprecated since version 3.16.1! Use wp_smush_should_skip_lazy_load instead. in /srv/www/cyberthreat.blog/wordpress/wp-includes/functions.php on line 6085

Deprecated: Hook wp_smush_should_skip_parse is deprecated since version 3.16.1! Use wp_smush_should_skip_lazy_load instead. in /srv/www/cyberthreat.blog/wordpress/wp-includes/functions.php on line 6085

Category: CISA ICS Medical Advisories

BD Alaris Infusion Central (Update A)

by Cyberthreat Blog | Oct 23, 2024 | CISA ICS Medical Advisories | 0 |

1. EXECUTIVE SUMMARY CVSS v3 7.3 ATTENTION: Low attack complexity Vendor: Becton, Dickinson and Company (BD) Equipment: Alaris Infusion Central ——— Begin Update A part 1 of 2 ———...

Baxter Connex Health Portal

by Cyberthreat Blog | Oct 3, 2024 | CISA ICS Medical Advisories | 0 |

View CSAF 1. EXECUTIVE SUMMARY CVSS v3.1 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Baxter Equipment: Connex Health Portal Vulnerabilities: SQL Injection, Improper Access Control 2. RISK EVALUATION...

BPL Medical Technologies PWS-01-BT and BPL Be Well Android Application

by Cyberthreat Blog | Sep 18, 2024 | CISA ICS Medical Advisories | 0 |

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 5.1 ATTENTION: Low attack complexity/public exploits are available Vendor: BPL Medical Technologies Equipment: PWS-01-BT, Be Well Android App Vulnerability: Cleartext Transmission of...

Philips Vue PACS

by Cyberthreat Blog | Jul 18, 2024 | CISA ICS Medical Advisories | 0 |

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Philips Equipment: Vue PACS Vulnerabilities: Out-of-bounds Write, Deserialization of Untrusted Data, Uncontrolled Resource...

MicroDicom DICOM Viewer

by Cyberthreat Blog | Jun 11, 2024 | CISA ICS Medical Advisories | 0 |

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: MicroDicom Equipment: DICOM Viewer Vulnerabilities: Improper Authorization in Handler for Custom URL Scheme, Stack-based...

Baxter Welch Allyn Connex Spot Monitor

by Cyberthreat Blog | May 30, 2024 | CISA ICS Medical Advisories | 0 |

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.1 ATTENTION: Exploitable remotely Vendor: Baxter Equipment: Welch Allyn Connex Spot Monitor (CSM) Vulnerability: Use of Default Cryptographic Key 2. RISK EVALUATION Successful...

Santesoft Sante DICOM Viewer Pro

by Cyberthreat Blog | Feb 27, 2024 | CISA ICS Medical Advisories | 0 |

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Santesoft Equipment: Sante DICOM Viewer Pro Vulnerability: Out-of-Bounds Read 2. RISK EVALUATION Successful exploitation of this vulnerability...

Medtronic Micro Clinician and InterStim Apps

by Cyberthreat Blog | Feb 24, 2024 | CISA ICS Medical Advisories | 0 |

1. EXECUTIVE SUMMARY CVSS v3 6.4 ATTENTION: Low attack complexity Vendor: Medtronic Equipment: Micros Clinician (A51200) app and InterStim X Clinician (A51300) app Vulnerabilities: Unverified Password Change 2. RISK...

B. Braun Battery Pack SP with Wi-Fi

by Cyberthreat Blog | Feb 24, 2024 | CISA ICS Medical Advisories | 0 |

1. EXECUTIVE SUMMARY CVSS v3 5.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: B. Braun Melsungen AG Equipment: Battery Pack SP with Wi-Fi Vulnerability: Improper neutralization of directives in dynamically...

Illumina Universal Copy Service

by Cyberthreat Blog | Feb 24, 2024 | CISA ICS Medical Advisories | 0 |

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Illumina Equipment: Universal Copy Service (UCS) Vulnerabilities: Binding to an Unrestricted IP Address, Execution with...

Medtronic Paceart Optima System

by Cyberthreat Blog | Feb 24, 2024 | CISA ICS Medical Advisories | 0 |

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Medtronic Equipment: Paceart Optima System Vulnerability: Deserialization of Untrusted Data 2. RISK EVALUATION Successful...

BD Alaris System with Guardrails Suite MX (Update A)

by Cyberthreat Blog | Feb 24, 2024 | CISA ICS Medical Advisories | 0 |

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.2 ATTENTION: Low attack complexity Vendor: Becton, Dickinson and Company (BD) Equipment: Alaris PCU, Guardrails Editor, Systems Manager, Calculation Services, CQI Reporter...