Remove Authentication Remove Firmware Remove Manufacturing Remove Security Performance
article thumbnail

McAfee Enterprise ATR Uncovers Vulnerabilities in Globally Used B. Braun Infusion Pump

McAfee

CVE-2021-33885 – Insufficient Verification of Data Authenticity (CVSS 9.7). CVE-2021-33882 – Missing Authentication for Critical Function (CVSS 8.2). Of course, for our purpose, the most important question remains – is there any previous research performed on our specific device. Braun on January 11, 2021.

article thumbnail

APT Attacks & Prevention

eSecurity Planet

Manufactured BackDoor Vulnerabilities. Chinese APT attackers developed a Unified Extensible Firmware Interface (UEFI) malware that hijacks the booting sequence and is saved in the SPI flash memory of the motherboard beyond where most tools might remove it. Improve Access Control Security for Users.

Firewall 106