Vulnerability

Olympus lists EasyLink, nStream and Brainlab Kick as vulnerable to Spectre and Meltdown

MedDevice Cyber Staff · Jan 16 · 2 min read · Via Olympus Spectre and Meltdown response

Olympus published its response to Spectre and Meltdown on January 16, 2018, last revised March 23, 2018. Products confirmed vulnerable are Brainlab Kick, EasyLink Router v8.0.5 and v8.1, LSSB v8.0.5 and v8.1, MedPresence v9.0.3.1, nCare RX v8.0.5 and v8.1, and nStream GX v9.0.10.

Remediation is mainly the validated Microsoft update, or an upgrade from EasyLink Router v8.0.5 to v8.1. ProSound F75 and ShockPulse SE are not vulnerable.

Listing the products that are not vulnerable alongside the ones that are saves customers a round of support tickets, and more vendors should do it.

Are you a representative of Olympus or Brainlab? Submit an official response →

Remediation Desk

For ProvidersOperators, hospitals, and clinical engineering

Apply the Olympus validated Microsoft update to the listed products, and upgrade EasyLink Router v8.0.5 to v8.1. ProSound F75 and ShockPulse SE need no action.

Upgrade EasyLink. Move EasyLink Router v8.0.5 to v8.1.
Apply the validated update. Install the Microsoft update Olympus validated on LSSB, MedPresence, nCare RX, nStream GX and Brainlab Kick.
Close the loop. Mark ProSound F75 and ShockPulse SE as not affected in the asset record.

For Device ManufacturersAm I affected, and how to fix the class

Am I affected?

This class applies to devices with the signals and properties below. Check them against your product to gauge exposure. The named product rows list what the sources state about the affected product.

Required

Named operating system

Kick

Named operating system

Fix the class in your product

The flaw is in the OS inside the controller, or a system past end of service still in the field. As the maker, own the embedded OS and server lifecycle as a safety obligation, design controllers to update in the field, and make every fault degrade to a defined safe state.

Own the OS lifecycle. Patch the OS and server components on a schedule with a tested delivery path.
Design for field update. And for planned replacement, so an unpatchable unit has a path off the network.
Degrade to safe. A fault drives a defined safe state, never an unexpected stop on a life-sustaining device.

Mapped EMB3D mitigations

Questions & Answers

Which Olympus products are vulnerable to Spectre and Meltdown?

Olympus's statement of January 16, 2018 lists Brainlab Kick, EasyLink Router v8.0.5 and v8.1, LSSB v8.0.5 and v8.1, MedPresence v9.0.3.1, nCare RX v8.0.5 and v8.1, and nStream GX v9.0.10 as vulnerable.

How do you fix Spectre on Olympus EasyLink Router?

Olympus recommends the validated Microsoft update, and for EasyLink Router v8.0.5 an upgrade to v8.1, per its Spectre and Meltdown response last revised March 23, 2018.

Is the Olympus ShockPulse SE affected by Meltdown?

No. Olympus states ProSound F75 and ShockPulse SE are not vulnerable to Spectre and Meltdown.

← Back to Vulnerabilities