PRODUCT SECURITY BULLETIN: AMNESIA:33

Publication Date: 12/8/2020
Last Updated: 12/8/2020

Abbott is proactively monitoring developments related to the recently identified vulnerabilities in third-party open-source networking software components (TCP/IP stacks), commonly referred to as "Amnesia:33". According to published reports, including the CISA Alert1, the vulnerabilities in the software that supports network connectivity could allow unauthorized access, loss of system availability or exposure of sensitive information.

Abbott products are not impacted by this advisory. Abbott's product security and quality teams will continue to monitor this situation and assess these vulnerabilities for potential impact as updates are made. We will update this advisory if new information warrants additional communication.

Additional Information

Customers interested in additional information regarding patches, procedures or configuration changes on any Abbott products should contact their Abbott assigned account or customer support representative.

Abbott is committed to ensuring the safety and security our products. For more information on Abbott’s product cybersecurity program click here.

 

References
1. Cybersecurity and Infrastructure Security Agency (CISA), ICS Alert (ICS-ALERT-20-343-01) Multiple Embedded TCP/IP Stacks. Accessed December 8, 2020, https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01