Affected Products and Solutions
The following ultrasound products from Siemens Healthineers are affected by SMBv1 vulnerabilities:
- ACUSON P300, P500, SC2000, and X700 ultrasound systems
- syngo Workplace products
Vulnerabilities and Mitigations
The vulnerabilities can be exploited by unauthenticated remote attackers, allowing arbitrary code execution via specially crafted requests sent to the SMBv1 server of affected Microsoft Windows systems.
Siemens Healthineers recommends specific countermeasures, including isolating affected products from infected systems, disconnecting uninfected products from the network, and applying patches and remediation.
General Security Recommendations
Ensure appropriate backups and system restoration procedures are in place, and contact local Siemens Healthineers Customer Service Engineers for specific patch and remediation guidance.
Manual:
Chat: Powered By VoiceSphere