Information Security News mailing list archives

URGENT/11: FDA issues alert for cyber vulnerability that threatens medical devices, networks


From: InfoSec News <alerts () infosecnews org>
Date: Fri, 4 Oct 2019 09:15:24 +0000 (UTC)

https://www.healthcareitnews.com/news/urgent11-fda-issues-alert-cyber-vulnerability-threatens-medical-devices-networks

By Mike Miliard
Healthcare IT News
October 02, 2019

The U.S. Food and Drug Administration issued a safety communication on Tuesday – aimed at healthcare organizations, IT professionals, device manufacturers and patients – warning of the cybersecurity vulnerabilities known as URGENT/11.


WHY IT MATTERS

The risk, said FDA officials in the communication, is that URGENT/11, if exploited by a remote attacker, could pose safety and security risks for connected medical devices and hospital networks.

The URGENT/11 vulnerabilities center around a third-party software, IPnet, that computers use to communicate with each other over a network. They affect at least six different operating systems and could impact connected equipment such as routers, connected devices or other critical infrastructure.

"Security researchers, manufacturers and the FDA are aware that the following operating systems are affected, but the vulnerability may not be included in all versions of these operating systems," the FDA said, listing the operating systems:

[...]
--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
https://twitter.com/infosecnews_

Current thread: