notableGuidance
InterSystems Corporation InterSystems IRIS for Health
Successful exploitation of this vulnerability could allow an attacker to view transmitted data and use that data to log into the device.
Goat Feed · Topic
Guidance
Regulator guidance
notableGuidance
J4Care dcm4che
Successful exploitation of these vulnerabilities could allow an attacker to delete stored medical images, disclose patient information, inject forged studies, reassign patient records, overwrite files, and cause a denial-of-service condition.
notableGuidance
Thermo Fisher Torrent Suite Software
Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the Torrent Server.
notableGuidance
Pulsetto Vagus Nerve Stimulator (Update A)
Successful exploitation of this vulnerability could allow an attacker to use could use undocumented commands to modify certain stimulation settings.
notableGuidance
NextGen Healthcare Mirth Connect
Successful exploitation of these vulnerabilities could allow an attacker to exfiltrate date or cause a denial-of-service condition.
notableGuidance
Orthanc DICOM Server
Successful exploitation of this vulnerability could allow an authenticated remote attacker to write past the end of a heap allocation when Orthanc decodes an attacker-supplied PNG or JPEG image, resulting in a crash of the Orthanc process and a denial-of-service condition.
notableGuidance
Flow Neuroscience FL-100
Successful exploitation of this vulnerability could allow an attacker within Bluetooth range to manipulate brain stimulation parameters and override safety limits.
notableGuidance
Pulsetto Vagus Nerve Stimulator
Successful exploitation of this vulnerability could allow an attacker to use hidden commands to disable electrical safety mechanisms or modify other stimulation output settings.
notableGuidance
Mira Hormone Monitor, Mira Android App
Successful exploitation of these vulnerabilities could allow an attacker to access unauthorized health profile information, make changes to health information, cause a denial-of-service condition, disclose session token information, and obtain control of user accounts.
notableGuidance
Medixant RadiAnt DICOM
Successful exploitation of this vulnerability could allow an attacker to cause the application to crash if a maliciously crafted DICOM file is opened.
notableGuidance
Thermo Fisher Applied Biosystems Genetic Analyzers
Successful exploitation of this vulnerability could allow an attacker to modify .fsa/.hid output files, tampering with DNA data and resulting in inaccurate test results.
notableGuidance
OFFIS DCMTK Toolkit
Successful exploitation of these vulnerabilities could allow an attacker to write files, access unauthorized information, exhaust memory, or crash affected DCMTK client or server processes.
notableGuidance
OHIF Viewers DICOM
Successful exploitation of this vulnerability in a custom integration version could allow an attacker to steal an authenticated clinician's token via a crafted link.
notableGuidance
pydicom pynetdicom Library
Successful exploitation of this vulnerability could allow an unauthenticated attacker to write to arbitrary file paths.
notableGuidance
Eppendorf BioFlo 320
Successful exploitation of this vulnerability could allow an attacker to gain full access to functionality and data with the bioreactor.
notableGuidance
Fourth Frontier Frontier X Mobile Application, Frontier X2
Successful exploitation of this vulnerability could allow an attacker to read and write arbitrary handle values and change clinical readings, which could result in taking control of the device and lead to patient harm.
notableGuidance
Apollo Pharmacy Blood Glucose Monitoring System APG-01 BT
Successful exploitation of these vulnerabilities could allow an attacker to obtain sensitive health-related information and prevent legitimate users from establishing a connection with the device.