Skip to main content

Spacelabs XTR & Arkon BlueKeep Vulnerability

SpaceLabs has confirmed that their Xhibit Telemetry Receiver and Arkon anaesthesia delivery system are affected by the BlueKeep RDP vulnerability. They claim that a remote unauthenticated user could exploit this vulnerability to gain control of affected systems.

Threat ID:
CC-3371
Category:
Threat Severity:
Low
Threat Vector:
Published:
19 February 2020 12:00 AM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

SpaceLabs has confirmed that their Xhibit Telemetry Receiver and Arkon anaesthesia delivery system are affected by the BlueKeep RDP vulnerability. They claim that a remote unauthenticated user could exploit this vulnerability to gain control of affected systems.

Affected platforms

The following platforms are known to be affected:

  • Spacelabs XTR, Model No. 96280 - Versions 1.0.2
  • Spacelabs Arkon - All versions

Remediation steps

Type Step

SpaceLabs are recommending updating affected XTR products to versions 1.2.1, which has been confirmed to fully address BlueKeep. They have also stated that as all Arkon products have been deprecated, they will not receive updates to address BlueKeep. Affected organisations are encouraged to review SpaceLabs advisory and contact their relevant suppliers to apply these updates.

Microsoft released updates to fully address BlueKeep in supported Windows versions in May 2019. Affected organisations should apply these updates immediately.

CVE Vulnerabilities

Status

CVE-2019-0708

Last edited: 29 June 2021 12:00 pm