Stories
Slash Boxes
Comments

SoylentNews is people

SoylentNews is powered by your submissions, so send in your scoop. Only 17 submissions in the queue.
posted by Fnord666 on Tuesday June 18 2019, @03:19AM   Printer-friendly
from the infused-with-bugs dept.

Submitted via IRC for SoyCow4463

Researchers discovered two vulnerabilities in Alaris Gateway Workstations that are used to deliver fluid medication. One of them is critical and an attacker could leverage it to take full control of the medical devices connecting to it.

A flaw in the firmware code of the device has been assigned the highest severity score, a perfect 10, so it can be exploited remotely and without authentication. The other issue received is less severe and affects the workstation's web-based management interface.

[...] Researchers at CyberMDX discovered that AGW's firmware can be replaced remotely with a custom version. An attacker sitting on the same network as the target system would be able "update and manipulate a CAB file, which stores files in an archived library and utilizes a proper format for Windows CE," say the researchers.

With this type of access, the adversary would be able to alter the dosage of the drug dispensed by certain models of infusion pumps connected to an AWG, which are common in hospital wards and intensive care units.

Source: https://www.bleepingcomputer.com/news/security/critical-bug-in-infusion-system-allows-changing-drug-dose-in-medical-pumps/


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 1) by aristarchus on Tuesday June 18 2019, @09:21PM (2 children)

    by aristarchus (2645) on Tuesday June 18 2019, @09:21PM (#857181) Journal

    Looks like we need, unfortunately, an "on-topic" mod. Well said, NotSanguine!

    (As for "aristarchus for ed", the double spam mod is still in place, for saying "Wow" in four different stories that had no comments, more of a "frost piste" than spamming. I don't think they like me, and are looking for any excuse to censor me. Sorry, but you asked for it. #Freearistarchus.)

  • (Score: 2) by NotSanguine on Tuesday June 18 2019, @10:16PM (1 child)

    Just because you spammed a bunch of articles doesn't mean they don't like you.

    It means you spammed multiple articles and were called on it by the users. Any logged in user can mod you spam, and IIRC, at least a couple of the spam mods you received weren't from editors or admins. Just regular users who don't want to see that shit.

    Perhaps you'll consider this [xkcd.com] next time.

    Regardless of how many comments there may or may not be, spamming is still spamming. If you'd been more original, you'd have been just as likely to get modded funny or offtopic instead.

    --
    No, no, you're not thinking; you're just being logical. --Niels Bohr
    • (Score: 0, Troll) by aristarchus on Wednesday June 19 2019, @08:53AM

      by aristarchus (2645) on Wednesday June 19 2019, @08:53AM (#857359) Journal

      And, once more, you have allowed yourself to be drawn off-topic! And you started out so well!