Philips HDI 4000 Ultrasound

Risk Summary

Successful exploitation of this vulnerability could lead to exposure of ultrasound images (breaches of confidentiality) and compromised image integrity. The vulnerability does not affect patient safety or systems operations (availability).

CVEs (1)

Remediations

• Users should implement controls to limit access to the network and consider replacing the system with a newer technology and supported operating system.
• Please see the Philips product security website for the latest security information for Philips products:
• https://www.philips.com/productsecurity
• The support life cycle for the Philips HDI 4000 Ultrasound system ended on December 31, 2013. As such, these devices are no longer sold, updated, or supported by Philips.
• Where additional information is needed, follow this link to existing cybersecurity in medical device guidance issued by the FDA.
• High skill level is needed to exploit.

Affected Vendors

Affected Products (1)

Affected Sectors

Healthcare and Public Health