Critical vulnerabilities in Radiometer medical analyzers allow attackers with physical access to extract sensitive credentials due to design weaknesses and insecure operating system configurations.

The vulnerability stems from the use of hard-coded credentials and improper privilege management within legacy operating systems. An attacker with physical access to the medical analyzer can leverage these weaknesses to bypass standard security controls and gain unauthorized access to sensitive credential information.

The exploitation of this vulnerability poses a significant risk to the integrity and confidentiality of medical data, as an attacker could potentially gain administrative control over the analyzer. Given the CVSS score of 8.4, this represents a high-severity risk that could lead to unauthorized system access, potential data exfiltration, or service disruption in a critical healthcare environment.

Immediate Action: Contact your local Radiometer representative immediately to discuss the permanent solution and mitigation steps for your specific device configuration.

Proactive Monitoring: Restrict physical access to the analyzers to authorized personnel only, and maintain strict surveillance of the areas where these devices are deployed.

Compensating Controls: Implement physical security measures such as locked cabinets or restricted-access rooms to prevent unauthorized individuals from obtaining the physical interaction required to trigger this vulnerability.

Public Exploit Available: Unknown

Given the sensitivity of the medical environment and the high CVSS score, organizations must treat this vulnerability with urgency. Ensure that physical access controls are strictly enforced while coordinating directly with Radiometer representatives to implement the permanent remediation once it becomes available for your specific unit.