Through sharp, technical and insightful analysis, the Payatu Team is constantly on the lookout for vulnerabilities and threats. This section exhibits a few of our findings.
Unautenticated UART port in niscomed patient monitoring device
Unautenticated UART port in niscomed patient monitoring
An issue was discovered on Nescomed Multipara Monitor M1000 devices.The physical UART debug port provides a shell, without requiring a password, with complete root access. This leads to compromised medical data and integrity of the device.
M1000 Multipara Patient monitor
22 June 2020 reported to the vendor
22 July 2020 No response from the vendor and Public disclosure.