How many of these devices are still running Windows XP?
Weak default passwords on the web interface is just the icing on the cake, the low-hanging fruit. The entire networking stack is likely to be riddled with unpatched vulnerabilities for anyone to exploit.
Relative obscurity and physical security are probably the only things that stand between hospital equipment and certain disaster.
>How many of these devices are still running Windows XP?
A lot. I know we have telemetry systems that are all XP based. Granted, they're on a separate VLAN that doesn't touch the public internet or the rest of our internal network, but there are still physical security concerns there.
>Weak default passwords on the web interface is just the icing on the cake, the low-hanging fruit. The entire networking stack is likely to be riddled with unpatched vulnerabilities for anyone to exploit.
A major problem in healthcare is that vendors tend to use generic credentials for support purposes.
>Relative obscurity and physical security are probably the only things that stand between hospital equipment and certain disaster.
Even then, you can pop on a pair of scrubs and avoid most scrutiny. Keycard systems are there, but those aren't difficult. Sometimes the operating area doesn't have cameras and the area surrounding the 2 million dollar daVinci machines are deserted.
>Even then, you can pop on a pair of scrubs and avoid most scrutiny. Keycard systems are there, but those aren't difficult. Sometimes the operating area doesn't have cameras and the area surrounding the 2 million dollar daVinci machines are deserted.
I can confirm this.
I can also confirm that those daVinci machines are way less impressive looking in person than they are plastered on roadside billboards. :)
Weak default passwords on the web interface is just the icing on the cake, the low-hanging fruit. The entire networking stack is likely to be riddled with unpatched vulnerabilities for anyone to exploit.
Relative obscurity and physical security are probably the only things that stand between hospital equipment and certain disaster.