Radiometer Products Privilege Boundary Violation Vulnerability

A privilege boundary violation vulnerability has been identified in multiple Radiometer products, including the ABL800 FLEX and ABL90 FLEX PLUS analyzers, AQT90 FLEX immunoassay analyzer, TCM5 FLEX transcutaneous monitor, and the PeriFlux 6000 monitor. This vulnerability allows a user with physical access to the analyzer to gain unauthorized access to functionalities outside the restricted environment. The issue arises from a weakness in the design of access control implementation in the application software.

Impact

Exploitation of this vulnerability could lead to unauthorized access to restricted functionalities on the affected analyzer.

Reproduction

Researchers have provided a working proof-of-concept for this vulnerability.

Remediation

Local Radiometer representatives will contact all affected customers to discuss a permanent solution.