Cyber alerts - NHS England Digital

Published Friday 2 December 2022 (11:16) (updated 2 December 2022)

BD BodyGuard Pumps Vulnerability

CISA Advisory includes a missing protection mechanism for alternate hardware interface vulnerability that could allow an attacker to change configuration settings or disable the pump

CC-4200 Low

Published Thursday 27 October 2022 (12:46) (updated 27 October 2022)

AliveCor KardiaMobile Vulnerabilities

CISA Advisory includes an authentication bypass vulnerability and a missing encryption vulnerability that could allow an attacker to read patient electrocardiography (EKG) results or create a denial-of-service condition

CC-4182 Low

Published Thursday 6 October 2022 (04:38) (updated 6 October 2022)

BD Totalys MultiProcessor Vulnerability

Use of Hard-coded Credentials vulnerability affects the Totalys MultiProcessor

CC-4176 Low

Published Wednesday 28 September 2022 (03:37) (updated 28 September 2022)

Medtronic NGP 600 Series Insulin Pumps Vulnerability

Protection Mechanism Failure vulnerability affects the MiniMed NGP 600 Series Insulin Pumps

CC-4175 Low

Published Friday 23 September 2022 (04:17) (updated 23 September 2022)

Baxter Sigma Spectrum Infusion Pump Vulnerabilities

CISA Medical Advisory released for four vulnerabilities found in four Sigma Spectrum and two Baxter Spectrum product lines

CC-4170 Low

Published Thursday 22 September 2022 (11:58) (updated 28 September 2022)

Vulnerabilities in Contec Health CMS8000

Five vulnerabilities affect Contec's ICU CCU Vital Signs Patient Monitor

CC-4120 Low

Published Friday 24 June 2022 (04:22) (updated 24 June 2022)

Vulnerabilities in OFFIS DCMTK

Vulnerabilities affecting the DCMTK software that processes Digital Imaging and Communications in Medicine (DICOM) image files

CC-4117 Low

Published Friday 17 June 2022 (02:10) (updated 17 June 2022)

Vulnerabilities in Hillrom Welch Allyn Resting Electrocardiograph Products

Hillrom Welch Allyn cardiology products affected by 'improper access control' and 'use of hard-coded password' vulnerabilities

CC-4107 Low

Published Tuesday 7 June 2022 (03:52) (updated 7 June 2022)

Critical Vulnerabilities in Illumina DNA Sequencing Software

Illumina security update addresses critical vulnerabilities in Illumina Local Run Manager

CC-4105 Low

Published Wednesday 1 June 2022 (03:26) (updated 1 June 2022)

BD Vulnerabilities in Synapsys

Becton, Dickinson and Company (BD) have reported an insufficient session expiration vulnerability in Synapsys, a software application delivering data management and workflow functionality across clinical diagnostic activities in a laboratory