LIVE FEED

A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident. A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident.

Vulnerability

Karl Storz AIDA and AIDA C ship with HD Graphics Control Panel hotkeys enabled

MedDevice Cyber Staff · Oct 30 · 2 min read · Via KARL STORZ security notice Hotkeys HD Graphics Control Panel

KARL STORZ published a security notice on October 30, 2024 covering the Hotkeys HD Graphics Control Panel vulnerability on various Windows Operating Systems. An external penetration test surfaced it. All software versions of the WD300 AIDA and WD310 AIDA C are potentially affected, and the hotkeys are enabled by default on both.

The notice reports no exploitation on a KARL STORZ product and names no software fix or CVE. The mitigation is to disable the hotkeys through Intel Graphics Settings, under Options and Support, then Hot Key Manager, which needs admin privileges.

Any shortcut that opens a vendor settings panel on a locked-down clinical workstation deserves the same scrutiny as an open port, and it should be off before the system ships.

Are you a representative of Karl Storz? Submit an official response →

Remediation Desk

For ProvidersOperators, hospitals, and clinical engineering

Every WD300 AIDA and WD310 AIDA C ships with the HD Graphics Control Panel hotkeys enabled and is potentially affected. KARL STORZ names no software fix; the mitigation is to disable the hotkeys in Intel Graphics Settings with admin privileges.

Disable the hotkeys. In Intel Graphics Settings, open Options and Support, then Hot Key Manager, and disable Hot Keys on each AIDA and AIDA C.
Lock admin access. Keep admin privileges on the AIDA limited to service staff, since the setting change requires them.
Verify after service. Confirm the hotkeys remain disabled after any reinstall, image restore or service visit.

For Device ManufacturersAm I affected, and how to fix the class

Am I affected?

This class applies to devices with the signals and properties below. Check them against your product to gauge exposure. The named product rows list what the sources state about the affected product.

Required

Named operating system

Contributing

Off-the-shelf software

WD300 AIDA

PID-23 Named operating system

WD310 AIDA C

PID-23 Named operating system

Fix the class in your product

The product exposes an interface with authentication off out of the box. As the maker, make the default configuration the secure configuration: require an admin credential before any interface serves data, and refuse to expose anything until setup is complete.

Default to authenticated. Block every data path until an admin credential is set on first boot.
Make insecure mode explicit. If an open mode must exist, it is a loud, logged, opt in choice, never the starting state.
Test the out of box state. Treat the shipped default as its own threat model.

Mapped EMB3D mitigations

Questions & Answers

Which Karl Storz AIDA systems are affected by the Hotkeys HD Graphics Control Panel vulnerability?

KARL STORZ said on October 30, 2024 that all software versions of the WD300 AIDA and WD310 AIDA C are potentially affected, because the Hotkeys for the HD Graphics Control Panel are enabled by default on both.

How do I disable the HD Graphics Control Panel hotkeys on Karl Storz AIDA?

With admin privileges, right-click the Windows desktop, select Intel Graphics Settings, open Options and Support, click Hot Key Manager and disable Hot Keys, per KARL STORZ's October 30, 2024 notice for the WD300 AIDA and WD310 AIDA C.

← Back to Vulnerabilities