Cybersecurity Threat Issued on BD Alaris Gateway
Department of Homeland Security’s National Cybersecurity and Communications Integration Center has issued a cybersecurity alert on BD’s Alaris Gateway Workstation, which is used to integrate infusion pump systems with hospitals’ central clinical information systems. The cyber threat could “allow unauthorized arbitrary code execution, which could allow an attacker to view and edit device status and configuration details as well as cause devices to become unavailable,” the alert says. “The Web browser user interface on the Alaris Gateway Workstation does not prevent an attacker with knowledge of the IP address of the Alaris Gateway Workstation terminal to gain access to the status and configuration information of the device.” BD offers several recommendations to shore-up security, such as downloading and using the latest firmware version.