FDA Safety Advisory Warns of Cyber Risk of Drug Pumps

The FDA issued a Safety Communication about critical software vulnerabilities in Hospira LifeCare PCA3/PCA5 infusion pumps that researchers found (unauthenticated Telnet/FTP access, root shell access, plaintext wireless keys, and insecure web interfaces). These flaws could allow remote or local attackers to alter dosage delivery, posing direct patient-safety risks; the advisory and ICS-CERT recommend isolating devices from untrusted networks, closing ports 20/23, performing integrity checks, and conducting clinical risk assessments.