Medical-device security has long been a challenge, suffering the same uphill management battle that the entire sprawling mess of IoT gadgets has faced. Vulnerabilities found in pumps made by Baxter International and Becton Dickinson Alaris System could be exploited to launch a DDoS attack, alter system configurations or siphon off patient data. The FDA issued a flurry of warnings urging medical device-makers and hospitals to patch their hardware against a slew of vulnerabilities, ranging from SweynTooth and URGENT/11 to Ripple20 and SigRed.
Source: https://threatpost.com/medical-device-security/163127/