SWEYNTOOTH Bluetooth flaws potentially impacting Medical Devices
Summary:
Health-ISAC published an initial Vulnerability Bulletin regarding SWEYNTOOTH on February 21, 2020 and is providing updated analysis and recommendations in this amended release. Health-ISAC is working closely with many Medical Device Manufacturers (MDMs) who welcome the hard work and diligence by the security researcher community in evaluating embedded systems. Their work makes the healthcare industry more resilient to cybersecurity attacks.
SWEYNTOOTH captures a family of 12 vulnerabilities (more under non-disclosure) across different Bluetooth Low Energy (BLE) software development kits (SDKs) of seven major system-on-a-chip (SoC) vendors. The vulnerabilities expose flaws in specific BLE SoC implementations that allow an attacker within radio range to trigger deadlocks, crashes and buffer overflows or completely bypass security of Bluetooth enabled devices depending on the circumstances.
See full report below:
- Related Resources & News
- Health-ISAC Hacking Healthcare 8-26-2024
- What is Threat Intelligence? A Comprehensive Overview
- Why Cybercriminals Target Healthcare Data and How Organisations Can Protect Themselves
- Federal Authorities Work to Boost Health-Care Cybersecurity
- Health-ISAC Hacking Healthcare 8-9-2024
- Health-ISAC Medical Device Blog – VEX
- Podcast: Health-ISAC Featured in Cyberwire Daily episode 2021
- Health-ISAC Hacking Healthcare 8-2-2024
- Protecting Healthcare Organizations with Human-Centric Email Security
- American Hospital Association and Health-ISAC Joint Threat Bulletin