Vulnerability

Philips Veradius Unity, Pulsera and Endura Dual WAN routers use weak encryption

MedDevice Cyber Staff · Dec 19 · 2 min read · Via CISA ICSMA-19-353-01

CISA published advisory ICSMA-19-353-01 on December 19, 2019, covering the Dual WAN router on Philips Veradius Unity (718132), Pulsera (718095) and Endura (718075) units with the wireless or ViewForum option. Affected Veradius Unity units shipped between 2016 and August 2018; affected Pulsera and Endura units shipped between June 26, 2017 and August 7, 2018. Daniel Yagudayev of New York Presbyterian Hospital reported it.

CVE-2019-18263 is inadequate encryption strength (CWE-326) with a CVSS v3 base score of 5.3. The router software uses an encryption scheme that is not strong enough for the protection the link requires.

The scored impact is availability alone. CISA's risk evaluation says exploitation could compromise the management interface of the front end router and interrupt data transfer over wireless communication. The vector needs adjacent network access and high attack complexity, so the attacker has to be within reach of the wireless link.

The reporter worked at a hospital, a reminder that clinical engineering and security teams at delivery organizations find real flaws in the equipment they run every day.

Philips has a solution for customers with the wireless or ViewForum option that updates the configuration of the Dual WAN router, available through Philips Customer Service. Weak crypto that a configuration change can fix should never have shipped as the default.

Are you a representative of Philips? Submit an official response →

Remediation Desk

For ProvidersOperators, hospitals, and clinical engineering

Contact Philips Customer Service for the configuration update to the Dual WAN router on Veradius Unity, Pulsera and Endura units with the wireless or ViewForum option. Check ship dates against the advisory to find affected units. Until the router is reconfigured, an attacker in wireless range could disrupt data transfer.

Identify affected units. Match Veradius Unity, Pulsera and Endura ship dates and options against the ranges in ICSMA-19-353-01.
Request the router configuration update. Philips Customer Service provides the Dual WAN router update for the wireless and ViewForum options.
Restrict the management interface. Keep the router's management interface off networks that have no reason to reach it.

For Device ManufacturersAm I affected, and how to fix the class

Am I affected?

This class applies to devices with the signals and properties below. Check them against your product to gauge exposure. The named product rows list what the sources state about the affected product.

Required

Wireless connectivity

Contributing

Hospital network

Veradius Unity, Pulsera and Endura Dual WAN router

PID-42 Wireless connectivity

Fix the class in your product

The product can encrypt but does not by default. As the maker, make transport security the default and the only option, refuse to negotiate down to plaintext, and validate the certificate on the device rather than trusting the network.

Encrypt by default. Require TLS on every link and reject an unencrypted fallback.
Validate the peer. Verify or pin the certificate; keep credentials and tokens out of URLs.
Retire the plaintext mode. Remove the legacy cleartext option on a defined timeline rather than carrying it forever.

Mapped EMB3D mitigations

Products potentially also affected

Products whose own public documentation shares this advisory's attributes. A shared attribute is a lead, not a finding. The status column shows only what each manufacturer has said.

Product	Manufacturer	Shared with this advisory	Manufacturer status
FreeStyle Libre 2 System, FreeStyle Libre 3 System	Abbott	Same signals	No feedback feed from manufacturer
SafeOp 2: Neural Informatix System	Alphatec Spine	Same signals	No feedback feed from manufacturer
ELAN 4 Electro Motor System	B. Braun	Same signals	No feedback feed from manufacturer
Hillrom Heart and Respiration Rate Monitoring System powered by	Baxter	Same signals	No feedback feed from manufacturer
Spectrum IQ Infusion System with Dose IQ Safety Software	Baxter	Same signals	No feedback feed from manufacturer
Welch Allyn Connex Spot Monitor; 901058 Vital Signs Monitor Core	Baxter	Same signals	No feedback feed from manufacturer
BD Alaris System with Guardrails Suite MX v12.1.2	BD	Same signals	No feedback feed from manufacturer
EnCor EnCompass Breast Biopsy and Tissue Removal System	BD	Same signals	No feedback feed from manufacturer
AVVIGO Guidance System	Boston Scientific	Same signals	No feedback feed from manufacturer
Lux 35 Detector	Carestream Health	Same signals	No feedback feed from manufacturer
CoroFlow Cardiovascular System	Coroventis Research	Same signals	No feedback feed from manufacturer
Infinity CentralStation Wide, Infinity M300, Infinity M300+	Dräger	Same signals	No feedback feed from manufacturer
HemoSphere Advanced Monitor	Edwards Lifesciences	Same signals	No feedback feed from manufacturer
Sonosite LX Ultrasound System	Fujifilm Healthcare	Same signals	No feedback feed from manufacturer
Definium Pace Select	GE HealthCare	Same signals	No feedback feed from manufacturer

20 more products match. Each manufacturer page lists its products and the advisories they share attributes with.

Questions & Answers

Which Philips Veradius Unity, Pulsera and Endura systems are affected by CVE-2019-18263?

CISA advisory ICSMA-19-353-01, published December 19, 2019, covers units with the wireless or ViewForum option: Veradius Unity (718132) shipped between 2016 and August 2018, and Pulsera (718095) and Endura (718075) shipped between June 26, 2017 and August 7, 2018. The Dual WAN router on these units uses inadequate encryption strength (CVSS v3 5.3).

How do I fix the Philips Dual WAN router weak encryption flaw?

Philips offers a configuration update for the Dual WAN router on Veradius Unity, Pulsera and Endura units with the wireless or ViewForum option, obtained through Philips Customer Service, per CISA advisory ICSMA-19-353-01 of December 19, 2019. The update addresses CVE-2019-18263.

← Back to Vulnerabilities