Summary
Successful exploitation of this vulnerability makes it possible for someone within the hospital network to remotely shut down or restart the workstation. In the event the workstation is remotely shut down, physicians are still able to use diagnostic imaging from the X-ray system.
Vulnerabilities 1
-
Medium 6.5
Philips Interventional Workstations OS Command Injection
Philips Interventional Workspot (Release 1.3.2, 1.4.0, 1.4.1, 1.4.3, 1.4.5), Coronary Tools/Dynamic Coronary Roadmap/Stentboost Live (Release 1.0), ViewForum (Release 6.3V1L10). The software constructs all or part of an OS command using externally influenced …
Revision history
-
#1
ICSMA-21-019-01 Philips Interventional Workstations
References
-
ICS Advisory ICSMA-21-019-01 Web Version
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-21-019-01
-
Recommended Practices
https://www.fda.gov/MedicalDevices/DigitalHealth/ucm373213.htm
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B