Bug can cause deadly failures when anesthesia device is connected to cell phones

[InfoSec News <alerts () infosecnews org>]

http://arstechnica.com/security/2014/04/bug-can-cause-deadly-failures-when-anesthesia-device-is-connected-to-cell-phones/

By Dan Goodin
Ars Technica
April 22, 2014

Federal safety officials have issued an urgent warning about software 
defects in an anesthesia delivery system that can cause life-threatening 
failures at unexpected times, including when a cellphone or other device 
is plugged into one of its USB ports.

The ARKON anesthesia delivery system is used in hospitals to deliver 
oxygen, anesthetic vapor, and nitrous oxide to patients during surgical 
procedures. It is manufactured by UK-based Spacelabs Healthcare Ltd., 
which issued a recall in March. A bug in Version 2.0 of the software 
running on the device is so serious that it could cause severe injury or 
death, the US Food and Drug Administration warned last week in what's 
known as a Class I recall. In part, the FDA advisory read:

  Reason for Recall: Spacelabs Healthcare is recalling the ARKON
  Anesthesia System with Version 2.0 Software due to a software defect.
  This software issue may cause the System to stop working and require
  manual ventilation of patients. In addition, if a cell phone or other
  USB device is plugged into one of the four USB ports for charging, this
  may also cause the System to stop working.

  This defect may cause serious adverse health consequences, including
  hypoxemia and death. Spacelabs Healthcare received one report related to
  the software defect. There has been no injuries or deaths associated
  with this malfunction.

[...]



--
Subscribe to InfoSec News
http://www.infosecnews.org/subscribe-to-infosec-news/