SoylentNews is people
SoylentNews
Submitted via IRC for SoyCow4463
Researchers discovered two vulnerabilities in Alaris Gateway Workstations that are used to deliver fluid medication. One of them is critical and an attacker could leverage it to take full control of the medical devices connecting to it.
A flaw in the firmware code of the device has been assigned the highest severity score, a perfect 10, so it can be exploited remotely and without authentication. The other issue received is less severe and affects the workstation's web-based management interface.
[...] Researchers at CyberMDX discovered that AGW's firmware can be replaced remotely with a custom version. An attacker sitting on the same network as the target system would be able "update and manipulate a CAB file, which stores files in an archived library and utilizes a proper format for Windows CE," say the researchers.
With this type of access, the adversary would be able to alter the dosage of the drug dispensed by certain models of infusion pumps connected to an AWG, which are common in hospital wards and intensive care units.
(Score: 3, Informative) by Gaaark on Tuesday June 18 2019, @03:51PM (1 child)
You're right: don't understand how people can use Windows for ANYTHING other than gaming....put your LIFE under the control of Windows? Sheeeit NO!
WindowsCE bloody price checker machines crash every day.... would you put your life in the hands of an alcoholic who needs ultra-fine motor control?
--- Please remind me if I haven't been civil to you: I'm channeling MDC. ---Gaaark 2.0 ---
(Score: 2) by NotSanguine on Tuesday June 18 2019, @03:59PM
Your point is well taken, but the vulnerabilities appear to be application (no authentication on web access, no verification of code when updating firmware, etc.) aren't Windows specific at all.
I'm perfectly happy to take Microsoft to task for the many, many, many, many (add a few more 'many's to make things approximate the level of fuck ups) instances of vulnerabilities, poor coding, poor testing, brain-dead policies, rapacious marketing/sales tactics, anti-competitive actions, spying on users, and on and on.
However, this doesn't appear to be a Windows issue. It's an application and permissions/authorization issue.
No, no, you're not thinking; you're just being logical. --Niels Bohr