A Hole in the Tube - Uncovering Vulnerabilities in Critical Infrastructure of Healthcare Facilities

This talk examines the security of hospital pneumatic tube systems, which transport medications, blood products, and laboratory samples. It presents nine vulnerabilities found in the firmware of a widely used vendor’s system, including risks involving IP connectivity, secure transfers, and remote monitoring.