Remisol Advance (2019-08-07)

Starting date:

August 7, 2019

Posting date:

March 6, 2020

Type of communication:

Medical Device Recall

Subcategory:

Medical Device

Hazard classification:

Type II

Source of recall:

Health Canada

Issue:

Medical Devices

Audience:

General Public, Healthcare Professionals, Hospitals

Identification number:

RA-72485

Last updated: 2020-03-10

• Reason
• Affected products

Affected Products

Remisol Advance

Reason

On May 14, 2019, Microsoft released a patch for a critical Remote Code Execution vulnerability in Remote Desktop Services (CVE-2019-0708).  This vulnerability can be exploited remotely without authentication on systems that use Remote Desktop Services for Windows XP, Windows 7, Windows Server 2003 and Windows Server 2008 operating systems. . An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs, view, change, or delete data, or create new Windows accounts with full user rights. (creating windows accounts may not give access to data via the Remisol Advance as Remisol Advance users and Windows users are different). If the vulnerability could be exploited locally (which has not been observed so far), in the worst case, it would lock down the computer and ask for a ransom. Therefore a delayed result can be foreseen.

Affected products