Roche Algo Edge Authentication Vulnerability in navify Algorithm Suite

A vulnerability exists in Roche Algo Edge versions prior to 2.1.2, which is a legacy component of the navify Algorithm Suite. This vulnerability affects the authentication mechanism, potentially allowing an attacker with adjacent access to the laboratory network and the Algo Edge system to create valid authentication tokens and access the component. Other components of the navify Algorithm Suite are not impacted.

Impact

Exploitation of this vulnerability could lead to unauthorized access to the Algo Edge component by crafting valid authentication tokens.

Remediation

Roche has released an update for Algo Edge version 2.1.2 and higher. Affected customers have been or are being migrated to a new solution. For more information on the update schedule, contact your local Roche Diagnostics office.