Summary
Successful exploitation of these vulnerabilities could allow an attacker access to administrative controls and system configurations, which could allow changes to system configuration items causing patient data to be sent to a remote destination.
Vulnerabilities 1
-
Low 2.1
Philips SureSigns VS4 Improper Input Validation
Philips SureSigns VS4, A.07.107 and prior receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.
Revision history
-
#1
Publication Date
References
-
ICS Advisory ICSMA-20-233-01 Web Version
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-20-233-01
-
Recommended Practices
https://www.fda.gov/MedicalDevices/DigitalHealth/ucm373213.htm
-
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B