Miele washer-disinfectors when connected to an in-house network 의 리콜

Recall

RC-2017-RN-00587-1

Class II

2017-05-16

Australia

DHTGA

https://apps.tga.gov.au/Prod/sara/arn-detail.aspx?k=RC-2017-RN-00587-1

Miele have identified an it security vulnerability affecting specific models of miele washer-disinfectors. these washer-disinfectors feature a network interface for connection to an in-house network for cycle documentation purposes. in the event of an attack on the in-house network of a hospital, a laboratory or a surgery, there is a risk that data from miele washer-disinfectors can be read out and/or replaced. this data is for the most part binary code. to date, there has been no evidence indicating that such an incident has ever occurred.

Miele is working on a solution for this issue. In the interim, Miele is recommending users implement the following measures in order to minimise risks: 1. Ensure that all relevant staff members using the machine are informed of this product correction; 2. Do not enable access to the machine via the Internet (e.g. through port forwarding). If the machine is accessible via the Internet, deactivate any Internet connections immediately; 3. Only operate these machines in a separate section of the network (physically separated or protected by access authorisation systems by configuring routers/firewalls). In this network, only operate the systems required for the documentation of reprocessing results (e.g. PC and printer);and 4. Access to any affected machine and access-authorised systems should be limited exclusively to persons requiring access. 4.1 Access-authorised systems should be protected using strong passwords. 4.2 Alter existing passwords on machines (cf. programming manual).