30 March 2009
UPDATE: MS08-067
Since 2009 January, there have been reports of many computer systems worldwide being infected with a computer worm known variously as "Conficker" or "Downadup," among other names. These worms exploit a known vulnerability in Microsoft Windows systems described in Microsoft Security Bulletin MS08-067. They can also infect patched systems through infected USB sticks or via unprotected shared resources. As previously announced, Philips engineers have evaluated this Microsoft security patch for affected products and continue to monitor the situation. Some media reports indicate a specific strain of this worm will become active on April 1st. Although different strains may have different behaviors and activation times, this does not change the recommended mitigation strategies. For information on mitigation recommendations or on the relevance and validation status of the MS08-067 hotfix for specific Philips medical devices, refer to the Philips Vulnerability Tables for specific products or contact your local Philips Service representative.
We continue to monitor this and other vulnerabilities closely and will post more information here and/or in the vulnerability tables for specific products as necessary.
Philips sells, and helps you maintain, highly complex medical devices and systems. Only Philips-authorized changes are allowed to be made to these systems, either by Philips personnel or (for certain products) by users if under Philips explicit published authorization/directions.
Please contact your Philips service representative for specific information about potential vulnerabilities and the availability of patches for your equipment configuration.
Philips Product Security
Security Advisory Archive