Vulnerability

Karl Storz TELE PACK + sends locally deleted images and videos to network export targets

MedDevice Cyber Staff · Jul 29 · 2 min read · Via KARL STORZ security notice TELE PACK +

KARL STORZ issued a security notice on July 29, 2025 for the TELE PACK + (TP101). With network export enabled, all versions from v2.0 to v2.2.1 transmit image or video files to the configured network target as soon as they are saved locally. Deleting a file afterwards on the TP101 only affects the internal storage, so the copy on the network target stays.

The issue was brought to the company's attention in March 2025 and occurred in a productive environment before being reproduced internally. KARL STORZ says it cannot be exploited by external actors maliciously. Revision 1.1 of the notice, dated March 27, 2026, names software v2.3 as the fix, available since March 10, 2026.

Until v2.3 reaches a region, the interim steps are to disconnect the network cable until the treatment is complete, or to export locally to USB mass storage media. A delete button that only deletes one copy is a records problem, so whoever owns the network target needs to know these files can arrive there.

Are you a representative of Karl Storz? Submit an official response →

Remediation Desk

For ProvidersOperators, hospitals, and clinical engineering

TELE PACK + (TP101) units on software v2.0 to v2.2.1 with network export enabled send files to the network target even when they are deleted locally. Update to software v2.3, which fixes the issue. Where v2.3 is not yet available, keep the network cable disconnected until the treatment is complete or export to USB mass storage instead.

Update to v2.3. Install TELE PACK + software v2.3 on every TP101 that uses network export.
Disconnect during treatment. Where v2.3 is not yet available, unplug the network cable until the treatment is complete, then reconnect it.
Review the export target. Check the configured network target for images or videos that staff deleted on the device and handle them under the site's records policy.

For Device ManufacturersAm I affected, and how to fix the class

Am I affected?

This class applies to devices with the signals and properties below. Check them against your product to gauge exposure. The named product rows list what the sources state about the affected product.

Required

Wired network

Contributing

USB port Removable media Hospital network

TELE PACK +

PID-27 PID-14 Wired network USB port Field-updatable firmware Removable media

Fix the class in your product

The software does not verify the integrity of its own output, so a tampered result passes as genuine. As the maker, sign results at creation with a device-held key and verify the signature before anything consumes them, and lock down who can write the result store.

Sign on write. Compute a signature over the result at creation; hold the key in a secure element.
Verify on read. Refuse a result that fails its integrity check before it feeds a decision.
Audit every change. Restrict write access to the store and log modifications so a silent change is impossible.

Mapped EMB3D mitigations

Questions & Answers

What is the Karl Storz TELE PACK + deleted files export issue?

When network export is enabled, the KARL STORZ TELE PACK + (TP101) software v2.0 to v2.2.1 sends image or video files to the configured network target as soon as they are saved, so files later deleted on the device remain on the network target. KARL STORZ disclosed it on July 29, 2025.

Which TELE PACK + software version fixes the network export issue?

Software v2.3 fixes the TELE PACK + (TP101) network export issue. KARL STORZ says it has been available since March 10, 2026, per revision 1.1 of its notice dated March 27, 2026.

← Back to Vulnerabilities