CVE-2022-29875CWE-502

A vulnerability has been identified in Biograph Horizon PET/CT Systems (All VJ30 versions < VJ30C-UD01), MAGNETOM Family (NUMARIS X: VA12M, VA12S, VA10B…

published June 1, 2022

CVSS
—
EPSS
2%
Percentile
79.2
In the wild
Unconfirmed
What it is

🚨 An unauthenticated attacker could exploit this flaw in various medical imaging systems with just a reachable port! 😱 Think of it like a delivery service that accepts packages without checking the sender — anyone could drop off harmful goods, wreaking havoc in the process. An attacker could gain the ability to execute arbitrary code on the affected systems, potentially compromising sensitive patient data or even manipulating the medical devices. This could lead to dire consequences in healthcare settings, where trust and security are paramount.

Put simply

Think of it like a delivery service that accepts packages without checking the sender — anyone could drop off harmful goods, wreaking havoc in the process. The vulnerability in multiple medical imaging systems arises from the deserialization of untrusted data without proper validation, enabling remote code execution if specific ports are accessible.

What to do

An attacker could gain the ability to execute arbitrary code on the affected systems, potentially compromising sensitive patient data or even manipulating the medical devices. This could lead to dire consequences in healthcare settings, where trust and security are paramount. Immediate action is required! Ensure that you update all affected systems to the patched versions. Additionally, check your network configurations to limit access to the vulnerable ports (32912/tcp and 32914/tcp). Stay vigilant! You've got this! With these steps, you'll help keep your systems secure and protect patient safety! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01870 · 79.2th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2022-06-01T09:50Z
EPSS history
Timeline
  • 01 JUN 09:50Z
    A vulnerability has been identified in Biograph Horizon PET/CT Systems (All VJ30 versions < VJ30C-UD01), MAGNETOM Family (NUMARIS X: VA12M, VA12S, VA10B…
    cvelistv5