Internet of things - FDA says to unplug drug infusion pumps

[wvjohn]

http://www.fda.gov/MedicalDevices/Safet ... 456815.htm

excerpt:

Hospira and an independent researcher confirmed that Hospira’s Symbiq Infusion System could be accessed remotely through a hospital’s network. This could allow an unauthorized user to control the device and change the dosage the pump delivers, which could lead to over- or under-infusion of critical patient therapies. The FDA and Hospira are currently not aware of any patient adverse events or unauthorized access of a Symbiq Infusion System in a health care setting.

Hospira has discontinued the manufacture and distribution of the Symbiq Infusion System, due to unrelated issues, and is working with customers to transition to alternative systems. However, due to recent cybersecurity concerns, the FDA strongly encourages health care facilities to begin transitioning to alternative infusion systems as soon as possible.

Recommendations for Health Care Facilities:

While transitioning to an alternative infusion system, consider taking the following steps to reduce the risk of unauthorized system access:

Disconnect the affected product from the network.

CAUTION: Disconnecting the affected product from the network will have operational impacts. Disconnecting the device will require drug libraries to be updated manually. Manual updates to each pump can be labor intensive and prone to entry error.
Ensure that unused ports are closed, including Port 20/FTP and Port 23/TELNET.
Monitor and log all network traffic attempting to reach the affected product via Port 20/FTP, Port 23/TELNET and Port 8443. Contact Hospira’s technical support to change the default password used to access Port 8443 or close it.

[Losbot]

Just awesome!

[FlyingPenguin]

Can't wait for this headline...

"Hackers hack patient's artificial heart. Demands bitcoin ransom..."

Nuzio here thinks it would he a shame if someone broke your heart...