AHA - American Hospital Association

07/03/2025 | News release | Distributed by Public on 07/03/2025 14:44

FDA announces software patch available for Contec, Epsimed patient monitors to address vulnerabilities

The Food and Drug Administration yesterday released a safety notice announcing a software patch is available to address cybersecurity vulnerabilities in certain Contec and Epsimed patient safety monitors. The patch completely removes networking functionality from the affected devices, making them functional for local monitoring only.

The Cybersecurity and Infrastructure Security Agency and FDA in January announced they discovered the monitors could be remotely controlled by an unauthorized user or not work as intended. The software also had a backdoor, potentially compromising networks the monitors may have been connected to. The announcement said the backdoor provided automated connectivity to an IP address linked to a third-party university.

The FDA said patients, caregivers and health care providers should not install the software patch themselves as it requires specialized expertise. The agency advised users to instead follow recommendations previously issued when the vulnerabilities were announced. The FDA advised health care facility staff to contact Contec at contact@ContecMed.com for the patch and installation instructions.

Cybersecurity
AHA - American Hospital Association published this content on July 03, 2025, and is solely responsible for the information contained herein. Distributed via Public Technologies (PUBT), unedited and unaltered, on July 03, 2025 at 20:44 UTC. If you believe the information included in the content is inaccurate or outdated and requires editing or removal, please contact us at support@pubt.io