LIVE FEED
A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident. A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident.
Saturday, October 31, 2026 Issue #499  ·  Est. 2025
Independent brief for device makers
Manufacturers // ICU Medical

ICU Medical

ICU Medical in MedDevice Cyber coverage: 2 stories, 2 products named, 10 CVEs, and the company's own disclosures.

Follow ICU MedicalClaim this page
Stories
2
Products named
2
Product CVEs
10
Responses on record
0
Latest story
Sep 7, 2017

Coverage

2 stories
01
Vulnerability

Smiths Medical Medfusion 4000 syringe pump ships hard-coded wireless, FTP and Telnet credentials

CISA advisory ICSMA-17-250-02A lists eight flaws in the Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump versions 1.1, 1.5 and 1.6, led by hard-coded wireless credentials (CVE-2017-12725, CVSS v3 9.8). Smiths Medical released version 1.6.1.

CISASep 74 min read
02
Vulnerability

Smiths Medical CADD-Solis Medication Safety Software hands users elevated SQL database rights

CISA advisory ICSMA-16-306-01 covers two flaws in Smiths Medical CADD-Solis Medication Safety Software 1.0 to 3.1: elevated SQL database privileges for any authenticated user (CVE-2016-8355, CVSS 9.9) and missing endpoint verification (CVE-2016-8358). Versions 3.2 and 4.1 fix both.

CISANov 13 min read

Products in our coverage

CVEs in coverage of ICU Medical products

CVE-2016-8355 CVE-2016-8358 CVE-2017-12718 CVE-2017-12720 CVE-2017-12721 CVE-2017-12722 CVE-2017-12723 CVE-2017-12724 CVE-2017-12725 CVE-2017-12726
← All manufacturers