BeaconMedaes TotalAlert Scroll Medical Air Systems
Successful exploitation of these vulnerabilities could allow an attacker to view and potentially modify some device information and web application setup information, which does not include access to patient health information. Additionally, BeaconMedaes has stated that a successful attacker would not be able to affect the ability of the device to operate as designed for the purpose of delivering medical air in compliance with the NFPA 99 standard for healthcare facilities.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-7510US | critical9.8 | — | ||
In the web application in BeaconMedaes TotalAlert Scroll Medical Air Systems running software versions prior to 4107600010.23, passwords are presented in plaintext in a file that i… | ||||
| CVE-2018-7518US | critical9.8 | — | ||
In TotalAlert Web Application in BeaconMedaes Scroll Medical Air Systems prior to v4107600010.23, an attacker with network access to the integrated web server could retrieve defaul… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSMA-18-144-01 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (2)
- FixedTotalAlert Scroll Medical Air Systems
BeaconMedaes has stated that the vulnerabilities do not compromise either patient health information or compliance with the NFPA 99 standard for healthcare facilities. To address these vulnerabilities, BeaconMedaes has created update 4107600010.24 and recommends that users of the TotalAlert Scroll Medical Air Systems update to this version or the latest release. BeaconMedaes recommends that affected users reach out to BeaconMedaes directly at 1-888-4MEDGAS (463-3427) to obtain this update.
- FixedTotalAlert Scroll Medical Air Systems
BeaconMedaes has stated that the vulnerabilities do not compromise either patient health information or compliance with the NFPA 99 standard for healthcare facilities. To address these vulnerabilities, BeaconMedaes has created update 4107600010.24 and recommends that users of the TotalAlert Scroll Medical Air Systems update to this version or the latest release. BeaconMedaes recommends that affected users reach out to BeaconMedaes directly at 1-888-4MEDGAS (463-3427) to obtain this update.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan