published March 25, 2019
🚨 A simple misconfiguration on Port 23/TELNET gives unauthorized users root privileges on medical infusion systems! 🤯 Think of it like leaving the front door of a hospital wide open, making it easy for anyone to walk in and tamper with life-saving equipment. This is a huge oversight that needs immediate attention! If an unauthorized user gains access, they could send commands to the infusion pump, potentially altering dosages or even shutting it down. This could lead to absolutely devastating consequences for patients relying on these systems. The stakes are high when it comes to patient safety!
Think of it like leaving the front door of a hospital wide open, making it easy for anyone to walk in and tamper with life-saving equipment. This is a huge oversight that needs immediate attention! CVE-2015-3954 affects several versions of Hospira's infusion systems, allowing unauthenticated users to issue commands via TELNET due to the default open port configuration.
If an unauthorized user gains access, they could send commands to the infusion pump, potentially altering dosages or even shutting it down. This could lead to absolutely devastating consequences for patients relying on these systems. The stakes are high when it comes to patient safety! Close Port 23/TELNET on all affected devices immediately to prevent unauthorized access. Hospira recommends upgrading to the Plum 360 Infusion System, which is not vulnerable to this issue. Check your systems now! You've got this! With these steps, you can secure your devices and keep patients safe. 🛡️