A low-privilege user can walk past role limits in Synapse Mobility
ICSMA-25-233-01: FUJIFILM Synapse Mobility lets an authenticated low-privilege user manipulate a web search parameter to reach imaging and patient data beyond their assigned role.
Fujifilm Healthcare in MedDevice Cyber coverage: 3 stories, 5 products named, 3 CVEs, and the company's own disclosures.
ICSMA-25-233-01: FUJIFILM Synapse Mobility lets an authenticated low-privilege user manipulate a web search parameter to reach imaging and patient data beyond their assigned role.
CISA advisory ICSMA-19-113-01 covers two flaws in Fujifilm FCR Capsula X, Carbon X and XC-2 CR-IR 357 cassette readers: unauthenticated telnet to the operating system (CVE-2019-10950, CVSS 9.8) and a TCP flood that forces a manual reboot (CVE-2019-10948). Fujifilm offers a Secure Host configuration.
Fujifilm tested and approved Microsoft patches KB4056892, KB4056898 and KB4056897 for Synapse PACS, Synapse Cardiovascular and Synapse RIS against Meltdown and Spectre, and warned that virtualization platforms also need updates.
Fujifilm Healthcare products with the device attributes their own public documentation states, and the advisories in our coverage that share those attributes.
| Product | Device type | Attributes | Matched advisories |
|---|---|---|---|
| Synapse PACS | Automated Radiological Image Processing Software | 27 | 39 |
| AutoSeg | System, Image Processing, Radiological | 11 | 18 |
| Sonosite LX Ultrasound System | System, Imaging, Pulsed Doppler, Ultrasonic | 17 | 3 |
| Sonosite PX Ultrasound System | System, Imaging, Pulsed Doppler, Ultrasonic | 10 | 3 |
| SCENARIA View Phase 5.0 | System, X-Ray, Tomography, Computed | 18 | 2 |
| EW10-EC02 Endoscopy Support Program | Gastrointesinal Lesion Software Detection System | 4 | 0 |
| FCT iStream Phase 2 | System, X-Ray, Tomography, Computed | 10 | 0 |
| FUJIFILM Endoscope Model EC-760S-A/L | Colonoscope And Accessories, Flexible/Rigid | 4 | 0 |
| FUJIFILM Processor EP-8000 | Endoscopic Video Imaging System/Component, Gastroenterology-Urology | 4 | 0 |
| SCENARIA View Phase 6.0 | System, X-Ray, Tomography, Computed | 15 | 0 |
| Sonosite LX and Sonosite PX Ultrasound Systems | System, Imaging, Pulsed Doppler, Ultrasonic | 6 | 0 |
| Sonosite MT Ultrasound System | System, Imaging, Pulsed Doppler, Ultrasonic | 14 | 0 |