Shulou(Shulou.com)05/31 Report--

A variety of Philips medical equipment was exposed to encryption vulnerabilities example analysis, many novices are not very clear about this, in order to help you solve this problem, the following small series will explain in detail for everyone, there are people who need this can come to learn, I hope you can harvest.

Security researcher Daniel Yagudayev discovered an encryption vulnerability (CVE-2019-18263) in Philips Veradius Unity, Pulsera, and Endura with dual WAN routers that allows attackers to compromise the management interface of front-end routers due to weak encryption mechanisms used by router software.

Philips, one of the world's largest electronics companies, was founded in the Netherlands in 1891 and is active worldwide in lighting, consumer electronics, home appliances, semiconductors and medical systems.

Philips Veradius Unity, Pulsera and Endura are Philips C-arm devices for the medical industry.

The following products and versions are affected:

Veradius Unity (718132)(with wireless option)(marketed from 2016 to August 2018);

Veradius Unity (718132) with ViewForum option (marketed from 2016 to August 2018);

Pulsera (718095) and Endura (718075)(with wireless option)(marketed from June 26, 2017 to August 7, 2018);

Pulsera (718095) and Endura (718075)(with ViewForum option)(marketed from 26 June 2017 to 7 August 2018);

Philips said that the internal systems of the product are designed to protect data confidentiality, and even if the vulnerability is exploited, an attacker cannot access patient data or interfere with the use of the system.

Philips has fixed this vulnerability and recommends that users download and update the dual WAN router configuration as soon as possible.

Did reading the above help you? If you still want to have further understanding of related knowledge or read more related articles, please pay attention to the industry information channel, thank you for your support.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.