by
Thomas Dworetzky, Contributing Reporter | August 04, 2015
The public disclosure caused a chain of events including the publishing of a cybersecurity safety advisory from the FDA.
Hospira reported to the BBC that it had been investigating the problem with the Department of Homeland Security and FDA "for some time," adding, "we will continue to investigate any feedback we receive on our devices. We will also continue to communicate with customers regarding cybersecurity, and software and infusion pump updates and/or enhancements."
Ad Statistics
Times Displayed: 45539
Times Visited: 1299 Ampronix, a Top Master Distributor for Sony Medical, provides Sales, Service & Exchanges for Sony Surgical Displays, Printers, & More. Rely on Us for Expert Support Tailored to Your Needs. Email info@ampronix.com or Call 949-273-8000 for Premier Pricing.
A new version of its LifeCare Infusion System has also been submitted to the FDA for approval, which according to Homeland Security would "mitigate" flaws in the software that allowed the hacking, according to the news organization.
Rios added that this single pump may not be the only Hospira product with hacking problems. "What I found was very interesting, many of Hospira’s infusion pumps utilize identical software on their infusion pumps' communications module, making them vulnerable to the exact same security issues associated with the PCA 3.
Rios provided a list of Hospira infusion pumps that he states he has "verified to be affected by the issues in the DHS and FDA advisory," the same ones disclosed by researcher Jeremy Richards in April. They are:
PCA 3 Lifecare (mentioned in the FDA advisory)
PCA 5 Lifecare (mentioned in the FDA advisory)
Plum A+ Infusion Pumps
PCA Lifecare
Symbiq (no longer sold by Hospira, but affected)
Additionally, Rios also suspects but hasn't verified, that other pumps may have the same problems. These include:
Plum A+3; Plum 360; Sapphire; Sapphire Plus
Back to HCB News
