Cyber alerts - NHS England Digital

Published Wednesday 29 December 2021 (01:25) (updated 4 February 2022)

Vulnerabilities in Fresenius Kabi Agilia Connect Infusion System

Vulnerabilities in Fresenius Kabi Agilia Connect Infusion System products could be exploited to allow an attacker to modify settings, access sensitive information, and perform arbitrary actions.

CC-3988 Low

Published Friday 10 December 2021 (02:14) (updated 10 December 2021)

Hillrom Welch Allyn Cardio Products Authentication Bypass Vulnerability

There is improper authentication vulnerability in Hillrom Welch Allyn cardiology products when those products are configured to use SSO.

CC-3981 Low

Published Tuesday 23 November 2021 (03:18) (updated 23 November 2021)

Philips IntelliBridge Hub Vulnerabilities

Two vulnerabilities in patient care device connectivity and interoperability solution

CC-3980 Low

Published Monday 22 November 2021 (12:28) (updated 13 January 2023)

Philips Patient Information Center iX (PIC iX) and Efficia CM Series Vulnerabilities

Three vulnerabilities in Patient Information Center iX (PIC iX) and Efficia CM Series products

CC-3972 Low

Published Wednesday 10 November 2021 (11:35) (updated 10 November 2021)

Philips MRI 1.5T and 3T Vulnerabilities

Vulnerabilities centre around improper access control, incorrect ownership assignment, and exposure of sensitive information to an unauthorised attacker.

CC-3969 Low

Published Friday 5 November 2021 (01:06) (updated 5 November 2021)

Philips Tasy Electronic Medical Record (EMR) HTML5 SQL Injection Vulnerabilities

Philips has released a security advisory to address SQL injection vulnerabilities in Philips Tasy Electronic Medical Record (EMR) HTML5.

CC-3965 Low

Published Thursday 7 October 2021 (12:14) (updated 7 October 2021)

Medtronic Releases Urgent Recall for MiniMed MMT-500 and MMT-503 Remote Controllers for Insulin Pumps

Urgent medical device recall for MiniMed MMT-500 or MMT-503 remote controller for MiniMed 508 and Paradigm insulin pumps

CC-3954 Low

Published Friday 1 October 2021 (11:21) (updated 7 October 2021)

Boston Scientific ZOOM LATITUDE Programming System Vulnerability

Boston Scientific does not plan issue a product update to address vulnerability

CC-3930 Low

Published Thursday 26 August 2021 (12:29) (updated 21 October 2022)

Multiple Vulnerabilities in B. Braun’s Infusion Pump System

PoC exploit released for multiple vulnerabilities in B. Braun’s infusion pump system

CC-3887 Low

Published Thursday 17 June 2021 (02:06) (updated 18 June 2021)

Moobot Botnet

A new Mirai variant