What is the issue?
Several medical products made by Siemens Healthineers are impacted by a recently patched Windows vulnerability dubbed ‘BlueKeep’.
More details on the vulnerability
The vulnerability tracked as CVE-2019-0708 impacts the Windows Remote Desktop Services (RDS), allowing attackers to perform remote code execution and hijack an entire network. However, the vulnerability has been fixed by Microsoft with its May 2019 Patch Tuesday updates.
What is the impact on Siemens products?
Siemens has published six security advisories describing the impact of the vulnerability on its products and the steps to be taken to mitigate the risks.