Product Security Updates

Product Security Bulletin for Oracle Database Component vulnerabilities

04 May 2021

Background

Terumo Blood and Cell Technologies is aware of the recently published Oracle Database Components cybersecurity vulnerabilities (CVE-2021-2035, CVE-2021-2018, CVE-2021-2054, CVE-2021-2116, CVE-2021-2117, CVE-2021-1993, CVE-2021-2045, CVE-2021-2000).

As a result, product technical teams have performed technical assessments to determine if the vulnerabilities present a measurable cybersecurity risk.

Response

Terumo Blood and Cell Technologies has confirmed the impact to the following list of products by the Oracle Database Component vulnerabilities.

Terumo Blood and Cell Technologies products that are confirmed to be unaffected by the Oracle Database Component vulnerabilities

The product list below is available to customers to help identify existing Terumo Blood and Cell Technologies products that have been confirmed to be unaffected by the recently published Oracle Database Component vulnerabilities. The list provided below is not comprehensive and may be updated over time. It does not indicate the patch or device status.

• Reveos™ Automated Blood Processing System
• Finia™ Fill and Finish System
• Cell Processing Application (CPA™)
• Trima Accel™ Procedure Summary (TAPS)
• Trima Accel™ Automated Blood Collection System
• Quantum™ Cell Expansion System
• Cadence™ Data Collection System
• Spectra Optia™ Apheresis System
• Mirasol™ Pathogen Reduction Technology (PRT) System
• InfoVu™
• Trima™ KPI Dashboard
• TOMEs™ (Terumo Operational Medical Equipment Software)
• T-ACE™ II+ (Terumo Automatic Component Extractor)
• Trucise™ Data Management System

Terumo Blood and Cell Technologies products that are confirmed to be susceptible to the Oracle Database Component vulnerabilities

The product list below is available to customers to help identify existing Terumo Blood and Cell Technologies products that have been confirmed to be susceptible to the recently published Oracle Database Component vulnerabilities. The list provided below is not comprehensive and may be updated over time. It does not indicate the patch or device status.

• Vista™ Information System
  • Oracle 12c for use with Vista Information System v4.2
  • Oracle 19c for use with Vista Information System v4.2.1

Customers that maintain patches independent of Terumo Blood and Cell Technologies delivery should ensure these actions are performed as the acting responsible entity in order to maintain the correct security posture of the system(s).

Oracle is either a registered trademark or a trademark of Oracle International Corporation in the United States and/or other countries.