Know Your Infusion Pump Vulnerabilities and Secure Your Healthcare Organization
Summary: Unit 42 analyzed crowdsourced scan data from more than 200,000 infusion pumps across seven manufacturers on hospital networks and found 75 percent had known security gaps, including exposure to one or more of roughly 40 known vulnerabilities or one or more of some 70 other IoT security alerts. Fifty-two percent of the pumps scanned were susceptible to two vulnerabilities disclosed in 2019, one rated critical and one high, and the FDA announced seven infusion pump recalls in 2021 and nine in 2020.
What you should know: Three out of four pumps that deliver medication to patients carry known, documented vulnerabilities, and the average pump stays in service eight to 10 years, so the legacy equipment outlasts the patching effort. An oversight in identifying, repairing or retiring an at-risk device can put patient lives or sensitive data at risk.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026