Abbott—i-STAT 1 Wireless Analyzers and i-STAT Alinity Instruments: May Be Susceptible to a KRACK Attack When Using Wi-Fi Protected Access Wireless Authentication Protocols
May 30, 2018 | Strategic Insights for Health System
ECRI Institute's complete weekly summary of medical device hazard and recall information is available in ECRI Institute's Health Device Alerts. For more information contact us at firstname.lastname@example.org.
In a May 2018 Important Product Information letter submitted by an ECRI Institute member hospital, Abbott states that the above analyzers may be susceptible to a Key Reinstallation Attack (KRACK) when using Wi-Fi Protected Access (WPA, more commonly WPA2) wireless authentication protocols because of a vulnerability in those protocols. Abbott also states that if the vulnerability is exploited, an unauthorized user may be allowed to intercept certain wireless communications. Abbott further states that other modes of wireless authentication are not affected by the KRACK vulnerability and that a successful attack requires both end-points of the wireless communication to have the vulnerability. The manufacturer has not confirmed the...