On 18 November 2021 ICS-CERT published ICS Medical Advisories to highlight vulnerabilities in the following products:
- Efficia CM Series – revisions A.01 to C.0x and 4.0
- IntelliBridge EC 40 Hub – version C.00.04 and prior
- IntelliBridge EC 80 Hub – version C.00.04 and prior
- Patient Information Center iX (PIC iX) – versions B.02, C.02 and C.03
Exploitation of these vulnerabilities could result in unauthorized access to data (including patient data), denial of service, or modifications to system configuration.
The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates.
ICS Medical Advisory (ICSMA-21-322-01)
https://us-cert.cisa.gov/ics/advisories/icsma-21-322-01
ICS Medical Advisory (ICSMA-21-322-02)
https://us-cert.cisa.gov/ics/advisories/icsma-21-322-02