Critical Vulnerability Found In Wireless Medical Devices

Cybersecurity researcher Scott Gayou found the vulnerability in Syringe infusion pump. 

The Syringe infusion pumps are used to deliver small doses of medication from a variety of syringe sizes in acute care settings.

The vulnerabilities including Buffer overflow, improper certificate, hard-coded credentials and passwords, passwords stored in the configuration fiel and improper access control.

Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5 and 1.6 are affected. The good thing is there is no known public exploits to target these vulnerabilities. But It can be possible when the attacker should have high skill to exploit these vulnerability remotely.