Cybersecurity Roundup: Cisco, Rapid7 Discover Vulnerabilities – Healthcare It News

Cybersecurity roundup: Cisco, Rapid7 discover vulnerabilities – Healthcare IT News

Credit: Stefan Schweihofer from Pixabay
No fix for password validation vulnerability in Cisco routers at end-of-life 
Cisco will not release a software update to address a security vulnerability in the web-based management interface of its still-available small-business routers – the models RV110W, RV130, RV130W and RV215W. 
The vulnerability is due to insufficient user input validation of incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface. 
The routers could result in a denial-of-service condition. According to the advisory, an attacker could send a crafted request to the web-based management interface and execute arbitrary commands on an affected device using root-level privileges.
Cisco has not, and does not, intend to release software updates, according to the announcement, and there are no workarounds.
The Cisco Small Business RV110W, RV130, RV130W and RV215W Routers have entered the end-of-life process,” said Cisco officials in the announcement. The company advises customers to migrate to the Cisco Small Business RV132W, RV160 or RV160W routers.
Multiple patches for multiple Cisco products are available
Cisco has also released updates to address cybersecurity vulnerabilities in multiple products. 
According to its advisory, the Cybersecurity and Infrastructure Security Agency (CISA) encourages administrators to apply the necessary updates for two of the higher-severity vulnerabilities.
The Cisco SD-WAN vManage software unauthenticated access to messaging services vulnerability exists because the messaging server container ports on an affected system lack sufficient protection mechanisms, says Cisco.
The vulnerability in an Nvidia data plane development kit affects Cisco products because the messaging server container ports on an affected system lack sufficient protection mechanisms.
Additional updates for lower-severity vulnerabilities are also available. 
Software updates for infusion pumps and batteries are forthcoming
In April, Rapid7 discovered multiple vulnerabilities in two TCP/IP-enabled medical devices produced by Baxter Healthcare – the SIGMA Spectrum Infusion Pump (Firmware Version 8.00.01) and SIGMA Wi-Fi Battery (Firmware Versions 16, 17, 20 D29)
Software updates to disable Telnet and FTP (CVE-2022-26392) are in process while others are now available, according to Baxter.
Updates to address the format string attack (CVE-2022-26393) are addressed in WBM version 20D30 and all other WBM versions, and authentication is already available in Spectrum IQ (CVE-2022-26394). 
Instructions to erase all data and settings from WBMs and pumps before decommissioning and transferring to other facilities (CVE-2022-26390) are available on Baxter’s website
More Whitepapers
More Webinars
© 2022 Healthcare IT News is a publication of HIMSS Media


Leave a Comment

Leave a Reply

Your email address will not be published.

Cyber Security Today, July 29, 2022 – Hackers change tactics to fight Microsoft, a new phishing service aimed at banks and more – IT World Canada

The Top 10 SMB cyber security mistakes. Find out how to fix these security risks. – Security Boulevard

Chutes & Ladders—Verily names chief marketing officer; Cigna's first chief health officer and more – FierceHealthcare

Cyber Security Today, July 18, 2022 – Ransomware targets small businesses, warnings for Digium Elastix and Netwrix Auditor administrators, and more – IT World Canada