A Hole in the Tube - Uncovering Vulnerabilities in Critical Infrastructure of Healthcare Facilities

Explore critical vulnerabilities in pneumatic tube systems (PTS) used in modern hospitals for transporting medications, blood products, and lab samples. Delve into the security analysis of this hidden yet crucial infrastructure that functions like a physical computer network within healthcare facilities. Examine nine critical vulnerabilities discovered in the firmware of PTS stations from a popular vendor used by thousands of North American hospitals. Gain insights into the potential risks associated with IP-connected PTS systems that offer advanced features such as secure transfers, slow transfers for sensitive cargo, and remote system monitoring through cloud connectivity. Learn about the implications of these vulnerabilities on patient care and hospital operations from security researchers Ben Seri and Barak Hadad in this 36-minute Black Hat conference presentation.