Michele Sleep Scoring System (2020-05-04)

Starting date:

May 4, 2020

Posting date:

May 29, 2020

Type of communication:

Medical Device Recall

Subcategory:

Medical Device

Hazard classification:

Type III

Source of recall:

Health Canada

Issue:

Medical Devices

Audience:

General Public, Healthcare Professionals, Hospitals

Identification number:

RA-73203

Last updated: 2020-05-29

• Reason
• Affected products

Affected Products

Michele Sleep Scoring System

Reason

Vulnerabilities (CVE-2020-11651/CVE-2020-11652) identified in the software deployment tool used by the Michele Sleep
Scoring System allowed attackers to access and run arbitrary commands on both the 'master' and linux based 'minion' salt servers on 02- May-20. The attackers used this to stop the MICHELE software on these servers and run cryptocurrency mining software.

Affected products