LIVE FEED
A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident. A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident.
Saturday, October 31, 2026 Issue #499  ·  Est. 2025
Independent brief for device makers
Manufacturers // Karl Storz

Karl Storz

Karl Storz in MedDevice Cyber coverage: 6 stories, 8 products named, 5 CVEs, and the company's own disclosures.

Follow Karl StorzClaim this page
Stories
6
Products named
8
Product CVEs
5
Responses on record
0
Latest story
Jul 29, 2025

Coverage

6 stories
01
Vulnerability

Karl Storz TELE PACK + sends locally deleted images and videos to network export targets

KARL STORZ said on July 29, 2025 that TELE PACK + (TP101) software v2.0 to v2.2.1 transmits image and video files to a configured network target even after a user deletes them locally. Software v2.3 fixes it.

Karl StorzJul 292 min read
02
Vulnerability

Karl Storz WD300 AIDA and WD310 AIDA C exposed to Windows IPv6 flaw CVE-2024-38063

KARL STORZ said on November 4, 2024 that all software versions of the WD300 AIDA and WD310 AIDA C ship with IPv6 enabled and are potentially affected by Windows TCP/IP flaw CVE-2024-38063. It recommends disabling IPv6.

Karl StorzNov 42 min read
03
Vulnerability

Karl Storz AIDA and AIDA C ship with HD Graphics Control Panel hotkeys enabled

KARL STORZ said on October 30, 2024 that all software versions of the WD300 AIDA and WD310 AIDA C are potentially affected by a Hotkeys HD Graphics Control Panel vulnerability found in an external penetration test. It recommends disabling the hotkeys.

Karl StorzOct 302 min read
04
Vulnerability

Karl Storz AIDA systems potentially affected by Windows Wi-Fi driver flaw CVE-2024-30078

KARL STORZ said on July 16, 2024 that all versions of the WD300 AIDA and WD310 AIDA C are Wi-Fi capable and potentially affected by CVE-2024-30078 if Wi-Fi was manually enabled. It recommends disabling the Wi-Fi feature.

Karl StorzJul 162 min read
05
Vulnerability

Karl Storz says older StreamConnect and SCENARA versions carry Log4j 1.x exposure to CVE-2021-4104

KARL STORZ's December 17, 2021 notice says supported products avoid Log4j 2.x and CVE-2021-44228, but StreamConnect v4.1.3 or lower, SCENARA.media 3.0 and SCENARA.core use Log4j 1.x and may be affected by CVE-2021-4104.

Karl StorzDec 173 min read
06
Vulnerability

Karl Storz lists AIDA Bella and end-of-life AIDA HD Connect as affected by PrintNightmare

KARL STORZ's August 26, 2021 update lists networked AIDA Bella (Windows 10 IoT Enterprise LTSB 1607) and end-of-life AIDA HD Connect as affected by CVE-2021-34527. AIDA Bella gets the Microsoft patch in its next release.

Karl StorzAug 262 min read

Products in our coverage

  • TELE PACK + TP101, software v2.0 to v2.2.1 endoscopy imaging and documentation unit
  • WD300 AIDA all software versions surgical documentation system
  • WD310 AIDA C all software versions surgical documentation system
  • StreamConnect WUIS3529 v4.1.3 or lower surgical video streaming system
  • SCENARA.media WS11140 version 3.0 OR media documentation software
  • SCENARA.core WS111, all versions OR data management software
  • AIDA Bella WD350-KT/WD350/WD300 (Windows 10 IoT Enterprise LTSB 1607) surgical documentation system
  • AIDA HD Connect 20205501-140, 20205502-1, 20205701-140, 20205702-1, software versions 17-20 (EOL) surgical documentation system

Products and threat intel

9

Karl Storz products with the device attributes their own public documentation states, and the advisories in our coverage that share those attributes.

ProductDevice typeAttributesMatched advisories
Endomat SelectInsufflator, Hysteroscopic72
CLEARVISION Irrigation Sheath 0° (7241AS)Nasopharyngoscope (Flexible Or Rigid)20
Endomat Select, IBS Shaver Software, LicenseInsufflator, Hysteroscopic40
Flexible Video-Uretero-Renoscope SSU SystemUreteroscope And Accessories, Flexible/Rigid30
IMAGE1 (TC400US); X-to-4U AdapterConfocal Optical Imaging70
KARL STORZ Bipolar Resectoscopes with HF CableResectoscope10
KARL STORZ Cysto-Urethro-Fiberscope (11272CU1)Cystourethroscope10
KARL STORZ ICG Imaging System, KARL STORZ Image1S Camera Control UnitConfocal Optical Imaging10
Karl Storz SupraloopCoagulator-Cutter, Endoscopic, Unipolar (And Accessories)20

CVEs in coverage of Karl Storz products

CVE-2021-34527 CVE-2021-4104 CVE-2021-44228 CVE-2024-30078 CVE-2024-38063
← All manufacturers