Vulnerability

Beckman Coulter validates Microsoft's BlueKeep patch across its Windows systems

MedDevice Cyber Staff · Jun 28 · 2 min read · Via Beckman Coulter product security updates

Beckman Coulter posted a notice on June 28, 2019 on BlueKeep, CVE-2019-0708, the critical remote code execution vulnerability in Remote Desktop Services that Microsoft patched on May 15, 2019. The flaw can be exploited remotely without authentication on Windows XP, Windows 7, Windows Server 2003 and Windows Server 2008.

The company says its research and development teams validated the installation of the Microsoft patch and, where appropriate, developed specific customer instructions for those systems. The notice itself names no product; Beckman Coulter points to a product specific Bluekeep information page. It was last updated on July 13, 2023.

A pre-authentication RDP flaw on an instrument PC calls for the validated patch first and a closed port 3389 right behind it.

Are you a representative of Beckman Coulter? Submit an official response →

Remediation Desk

For ProvidersOperators, hospitals, and clinical engineering

Apply Microsoft's CVE-2019-0708 patch to Beckman Coulter systems using the company's validated customer instructions from its Bluekeep information page. Block RDP to instrument PCs that do not need it.

Follow the product instructions. Use Beckman Coulter's product specific Bluekeep page to apply the validated patch to each system.
Close RDP. Block port 3389 to instrument PCs at the network edge and between segments.
Retire unsupported Windows. Plan replacement of instrument PCs still on Windows XP or Windows 7.

For Device ManufacturersAm I affected, and how to fix the class

Am I affected?

This class applies to devices with the signals and properties below. Check them against your product to gauge exposure.

Contributing

Named operating system

Fix the class in your product

The flaw is in the OS inside the controller, or a system past end of service still in the field. As the maker, own the embedded OS and server lifecycle as a safety obligation, design controllers to update in the field, and make every fault degrade to a defined safe state.

Own the OS lifecycle. Patch the OS and server components on a schedule with a tested delivery path.
Design for field update. And for planned replacement, so an unpatchable unit has a path off the network.
Degrade to safe. A fault drives a defined safe state, never an unexpected stop on a life-sustaining device.

Mapped EMB3D mitigations

Products potentially also affected

Products whose own public documentation shares this advisory's attributes. A shared attribute is a lead, not a finding. The status column shows only what each manufacturer has said.

Product	Manufacturer	Shared with this advisory	Manufacturer status
Infinity Gateway Suite	Dräger	Same named componentWindows Server (= 2003)	No feedback feed from manufacturer
Harmony Referral System	Topcon Healthcare	Same named componentWindows Server (= 2003)	No feedback feed from manufacturer

Questions & Answers

Did Beckman Coulter patch BlueKeep CVE-2019-0708?

Beckman Coulter said on June 28, 2019 that its research and development teams validated the installation of Microsoft's patch for CVE-2019-0708 and developed specific customer instructions where appropriate.

Which Windows versions does BlueKeep CVE-2019-0708 affect on Beckman Coulter systems?

Beckman Coulter's June 28, 2019 notice says CVE-2019-0708 can be exploited remotely without authentication on systems using Remote Desktop Services on Windows XP, Windows 7, Windows Server 2003 and Windows Server 2008.

← Back to Vulnerabilities