Product Vulnerability Responses
Swisslog Healthcare solutions are developed with proprietary technologies as well as open-source software and licensed software elements. Swisslog Healthcare continually monitors the security industry and scans solutions to identify potential vulnerabilities. In the event of an open-source code or licensed code vulnerability, Swisslog Healthcare takes steps to raise customer awareness of the risks, provide mitigations when available, and address the vulnerability.
If you haven’t already been contacted by the Swisslog Healthcare Support Team to set up an inspection of your server, as it relates to any known product vulnerabilities, please be sure to schedule an assessment today. As always, we are happy to assist with the efficacy and efficiency of your medication management.
Prioritizing the Security of Every Customer
We are committed to the security of our customers, providing a process that includes our collaborative approach with the industry.
Below, please see product vulnerability responses.
| Vulnerability Name | Swisslog Healthcare Response | Date |
|---|---|---|
|
Dirty Pipe
|
Swisslog Healthcare security services team did an assessment of the Dirty Pipe vulnerability. We are pleased to inform that there was no impact to the following applications: • Delivery Manager • Pharmacy Manager • BoxPicker Manager • PillPick Manager • TransLogic/Nexus Software • Insite Software • MedPortal • AutoPharm |
03 March 2022 |
|
Log4J.2x |
Swisslog Healthcare security services team did an assessment of the Log4j v2.x open-source vulnerabilities. We are pleased to inform that there was no impact to the following applications: • BoxPicker Manager • PillPick Manager • TransLogic/Nexus Software • Insite Software • MedPortal • AutoPharm |
22 February 2022 |
|
Log4J.2x
|
Swisslog Healthcare security services team did an assessment of the Log4j v2.x open-source vulnerabilities and confirmed impact to the following solutions: Delivery Manager (1.2 and below on SHVA): Mirth connector and Elastic vulnerabilities can be overcome with Delivery Manager 1.3 for the Swisslog Healthcare Virtual Appliance (SHVA) Pharmacy Manager (1.2, 1.5, & 2.0): Mirth connector and Elastic vulnerabilities can be overcome with Pharmacy Manager 1.21.6 (or later) for the Window server and 2.0.4 (or later) for the Swisslog Healthcare Virtual Appliance (SHVA) |
22 February 2022 |