Canon Medical in MedDevice Cyber coverage: 8 stories, 13 products named, 20 CVEs, and the company's own disclosures.
Canon Medical lists its UL and MR imaging products as affected by CVE-2023-21554, the Microsoft Message Queuing remote code execution flaw (CVSS 9.8), on systems with MSMQ enabled and TCP port 1801 open; the fix is the Microsoft 2023-04 or later cumulative update.
Canon Medical says CVE-2022-26809, a Microsoft RPC runtime remote code execution flaw, may potentially affect its CT, MR, VL and XR imaging products; UL and NM products block RPC ports. Canon recommends blocking ports 135, 139, 445 and 593.
Canon Medical says the FragAttacks IEEE 802.11 vulnerabilities, CVE-2020-24586 to CVE-2020-26147, may potentially affect products with a wireless FPD or the ultrasound wireless communication option; CT, MR, VL and NM products disable Wi-Fi by default.
Canon Medical says Vitrea Advanced 7.x and the VL Alphenix Angio Workstation 8.0 to 9.3 use affected Apache Log4j (CVE-2021-44228 and three related CVEs); the Alphenix blocks the attack with LDAP port 389 closed.
Canon Medical's advisory on CVE-2021-34527 lists Windows 10 and Windows 7 based CT, MRI, angiography, ultrasound, X-ray and eye-care systems and InnerVision service processors as possibly affected, with update schedules and port blocking provided.
Canon Medical's advisory on CVE-2020-0609, CVE-2020-0610 and CVE-2020-0611 says no Canon imaging equipment is affected, but the InnerVision Service Processor and Firewall on Windows 7 and 10 are affected by the Remote Desktop Client flaw.
Canon Medical's DejaBlue advisory says CVE-2019-1181, CVE-2019-1182 and three related pre-authentication Remote Desktop Services RCE flaws affect Alphenix V8.x workstations, CT TSX systems with SUREXtension, MRT series and InnerVision service processors.
Canon Medical Systems lists all diagnostic imaging equipment as possibly affected by Meltdown and Spectre (CVE-2017-5715, CVE-2017-5753, CVE-2017-5754) but judges patch side effects a bigger problem than the leakage risk.
Canon Medical products with the device attributes their own public documentation states, and the advisories in our coverage that share those attributes.
| Product | Device type | Attributes | Matched advisories |
|---|---|---|---|
| Vitrea Software Package | System, Image Processing, Radiological | 7 | 9 |
| XIDF-AWS801, Angio Workstation (Alphenix Workstation), V9.3 | Interventional Fluoroscopic X-Ray System | 11 | 4 |
| Alphenix, INFX-8000V/B, INFX-8000V/S, V9.5 | Interventional Fluoroscopic X-Ray System | 8 | 1 |
| Alphenix, INFX-8000C/B, INFX-8000C/S, V9.2 | Interventional Fluoroscopic X-Ray System | 2 | 0 |
| Alphenix, INFX-8000V/B, /S, V9.1 | Interventional Fluoroscopic X-Ray System | 7 | 0 |
| Alphenix, INFX-8000V/B, INFX-8000V/S, V9.6 with aEvolve Imaging | Interventional Fluoroscopic X-Ray System | 3 | 0 |
| Aplio a550, Aplio a450, Aplio a, Diagnostic Ultrasound System, | System, Imaging, Pulsed Doppler, Ultrasonic | 5 | 0 |
| Aplio i900/i800/i700 Diagnostic Ultrasound System, Software V5.1 | System, Imaging, Pulsed Doppler, Ultrasonic | 4 | 0 |
| Aquilion Exceed LB (TSX-202A/3) V10.6 with AiCE-I | System, X-Ray, Tomography, Computed | 5 | 0 |
| Aquilion Lightning (TSX-036A/7) V10.2 with AiCE-i | System, X-Ray, Tomography, Computed | 5 | 0 |
| Aquilion ONE (TSX-306A/3) V10.0 with Spectral Imaging System | System, X-Ray, Tomography, Computed | 5 | 0 |
| Aquilion ONE (TSX-306A/3) V10.4 with Spectral Imaging System | System, X-Ray, Tomography, Computed | 4 | 0 |
| Aquilion Prime SP (TSX-303B8) V10.2 with AiCE-i | System, X-Ray, Tomography, Computed | 3 | 0 |
| Cartesion Prime (PCD-1000A/3) V10.15 | System, Tomography, Computed, Emission | 4 | 0 |
| Cartesion Prime, PCD-1000A, V10.7 | System, Tomography, Computed, Emission | 3 | 0 |
| CT VScore+ | System, X-Ray, Tomography, Computed | 11 | 0 |
| MR Elastography; MZEK-001A | System, Nuclear Magnetic Resonance Imaging | 3 | 0 |
| Self-Propelled CT Scan Base Kit | System, X-Ray, Tomography, Computed | 2 | 0 |
| Vantage Fortian/Orian 1.5T | System, Nuclear Magnetic Resonance Imaging | 2 | 0 |
| Vantage Galan 3T | System, Nuclear Magnetic Resonance Imaging | 4 | 0 |
| Vantage Galan 3T, MRT-3020, V6.0 with AiCE | 1 | 0 | |
| Vantage Orian 1.5T | System, Nuclear Magnetic Resonance Imaging | 4 | 0 |
| Vantage Orian 1.5T, MRT-1550, V6.0 | System, Nuclear Magnetic Resonance Imaging | 2 | 0 |
| Vitrea CT Transcatheter Aortic Valve Replacement (TAVR) Planning | Automated Radiological Image Processing Software | 7 | 0 |
| Vitrea CT VScore | System, X-Ray, Tomography, Computed | 9 | 0 |
| XIDF-AWS801, Angio Workstation (Alphenix Workstation), V9.5 | System, X-Ray, Fluoroscopic, Image-Intensified | 8 | 0 |