Wind River TCP/IP Stack Security Update

12 September 2019

Terumo Blood and Cell Technologies is aware of the Wind River TCP/IP Stack cybersecurity vulnerabilities in the VxWorks platform. Internal Terumo Blood and Cell Technologies teams performed product assessments that utilize the VxWorks RTOS versions impacted by the three critical and eight noncritical vulnerabilities, CVE-2019-12255 through CVE-2019-12265. No critical risks were identified with our products using VxWorks due to the vulnerabilities. The architecture and design of the devices would put them in a safe state either with a noncontinuable alarm or with a reboot, both of which maintain patient and donor safety. We will nonetheless perform the patch to address the vulnerabilities as part of the already-scheduled releases for these products. We actively monitor our company’s internal internet-connected devices, as well as the broader industry, for other possible cybersecurity vulnerabilities. We continue to recommend that everyone in the global healthcare ecosystem employ industry-standard best-practice network security management and monitoring of their environments. Please contact your Terumo Blood and Cell Technologies representative for questions or additional information.

Wind River and VxWorks are either registered trademarks or trademarks of Wind River Systems, Inc. in the United States and/or other countries.