Author Topic: Critical Bug in Infusion System Allows Changing Drug Dose in Medical Pumps  (Read 60 times)

Offline Antus67

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 3986
    • View Profile
Author: Ionut Ilascu

Researchers discovered two vulnerabilities in Alaris Gateway Workstations that are used to deliver fluid medication. One of them is critical and an attacker could leverage it to take full control of the medical devices connecting to it.

A flaw in the firmware code of the device has been assigned the highest severity score, a perfect 10, so it can be exploited remotely and without authentication. The other issue received is less severe and affects the workstation's web-based management interface.

Alaris Gateway Workstation (AGW) is a product of Becton Dickinson and is used to communicate with infusion pumps and to power them during blood transfusions, anesthesia, and various therapy sessions like chemotherapy and dialysis.

full article here:
Windows Defender
VoodooShield 5.01
Trojan Remover