The Food and Drug Administration yesterday released a safety notice announcing a software patch is available to address cybersecurity vulnerabilities in certain Contec and Epsimed patient safety monitors. The patch completely removes networking functionality from the affected devices, making them functional for local monitoring only.

The Cybersecurity and Infrastructure Security Agency and FDA in January announced they discovered the monitors could be remotely controlled by an unauthorized user or not work as intended. The software also had a backdoor, potentially compromising networks the monitors may have been connected to. The announcement said the backdoor provided automated connectivity to an IP address linked to a third-party university.

The FDA said patients, caregivers and health care providers should not install the software patch themselves as it requires specialized expertise. The agency advised users to instead follow recommendations previously issued when the vulnerabilities were announced. The FDA advised health care facility staff to contact Contec at contact@ContecMed.com for the patch and installation instructions.

Related News Articles

Headline
Chinese state-sponsored cyber actors are maliciously targeting networks globally, including telecommunications, government and others, according to a joint…
Headline
The FBI Aug. 20 released an advisory warning of malicious activity by Russian cyber actors targeting end-of-life devices running an unpatched vulnerability in…
Headline
The Cybersecurity and Infrastructure Security Agency, Environmental Protection Agency, National Security Agency, FBI and international agencies Aug. 13…
Headline
The Department of Justice Aug. 11 announced a series of actions taken against the BlackSuit ransomware group, also known as “Royal,” including the disruption…
Headline
The FBI, Cybersecurity and Infrastructure Security Agency and international agencies July 29 released a joint advisory on recent tactics by the Scattered…
Headline
Microsoft July 22 released an update on the ongoing cyberattacks to SharePoint servers used within organizations, attributing the incidents to China-based…