Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-31650PUBLISHED: 2022-05-25In SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a.
CVE-2022-31651PUBLISHED: 2022-05-25In SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a.
CVE-2022-29256PUBLISHED: 2022-05-25
sharp is an application for Node.js image processing. Prior to version 0.30.5, there is a possible vulnerability in logic that is run only at `npm install` time when installing versions of `sharp` prior to the latest v0.30.5. If an attacker has the ability to set the value of the `PKG_CONFIG_PATH` e...
CVE-2022-26067PUBLISHED: 2022-05-25
An information disclosure vulnerability exists in the OAS Engine SecureTransferFiles functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series of network requests can lead to arbitrary file read. An attacker can send a sequence of requests to trigger this vulnera...
CVE-2022-26077PUBLISHED: 2022-05-25
A cleartext transmission of sensitive information vulnerability exists in the OAS Engine configuration communications functionality of Open Automation Software OAS Platform V16.00.0112. A targeted network sniffing attack can lead to a disclosure of sensitive information. An attacker can sniff networ...
User Rank: Apprentice
4/13/2016 | 12:57:29 PM
Who is liable when the patient's health is further compromised because they did not receive the proper procedure/care at the right time?
Operating premise is that the healthcare entity pays the ransom, and gets the data back. If the data modified and the patients health is compromised as a result of incorract/inaccurate information in their E.H.R, whos assume liability? Who validates the integrity of the data following a recovery from the ransomware attack?
Most hospitals have standby procedures which they fall back on during a major IT outage. Older physicians came of age in a pen & paper world and can generally switch back to paper based notes, orders, and patient records. But younger Docs are generally clueless in this regard. They have always worked in the E.H.R and digital environment -they never had the pen & paper experience. So thier success is dependent on regular training and drills.
Some hospitals keep their standby procedures on the computer/network. This makes for tough sledding when your off the network or down to minimal electrical power.