Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump Vulnerabilities (Update A)

Risk Summary

This updated advisory is a follow-up to the original advisory titled ICSMA-17-250-02 Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump Vulnerabilities that was published September 7, 2017, on the NCCIC/ICS-CERT web site.

CVEs (8)

Remediations

• Smiths Medical has released update Version 1.6.1 to mitigate the vulnerabilities in the Medfusion 4000 Wireless Syringe Infusion Pump.
• Smiths Medical recommends users apply the following defensive measures:
• For additional information about the vulnerabilities, proposed measures, or obtaining the product fix, contact Smiths Medical Technical Support at:
• Tel: +1 (800) 258 5361 or +01 614 210 7300
• Online: https://smiths-medical.custhelp.com/
• Email: [email protected]
• [email protected]
• ICS-CERT also provides a section for security recommended practices on the ICS-CERT web page athttp://ics-cert.us-cert.gov/content/recommended-practices.

Affected Vendors

Affected Products (3)