Summary
Successful exploitation of these vulnerabilities could allow an attacker to view and potentially modify some device information and web application setup information, which does not include access to patient health information. Additionally, BeaconMedaes has stated that a successful attacker would not be able to affect the ability of the device to operate as designed for the purpose of delivering medical air in compliance with the NFPA 99 standard for healthcare facilities.
Vulnerabilities 2
-
Unscored —
In the web application in BeaconMedaes TotalAlert Scroll Medical Air Systems running software versions prior to 4107600…
-
Unscored —
In TotalAlert Web Application in BeaconMedaes Scroll Medical Air Systems prior to v4107600010.23, an attacker with netw…
Revision history
-
#1
ICSMA-18-144-01 BeaconMedaes TotalAlert Scroll Medical Air Systems
References
-
ICS Advisory ICSMA-18-144-01 Web Version
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-144-01
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-144-01
-
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf