# Almost Half of Connected Medical Devices Are Vulnerable To Hackers Exploiting BlueKeep

**URL:** <https://onehack.st/t/almost-half-of-connected-medical-devices-are-vulnerable-to-hackers-exploiting-bluekeep/70399>\
**Category:** News & Articles\
**Tags:** hacking, technology\
**Created:** [February 19, 2020, 10:32am UTC](https://onehack.st/t/almost-half-of-connected-medical-devices-are-vulnerable-to-hackers-exploiting-bluekeep/70399 "2020-02-19T10:32:35Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Aina](https://onehack.st/user_avatar/onehack.st/aina/32/167469_2.png) [@Aina](https://onehack.st/u/Aina)\
**Post date:** [February 19, 2020, 10:32am UTC](https://onehack.st/t/almost-half-of-connected-medical-devices-are-vulnerable-to-hackers-exploiting-bluekeep/70399/1 "2020-02-19T10:32:35Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/a/c/ac970ca0330878c4df3d1ac88b2d1e026a49aa3e.jpeg)

An anonymous reader quotes a report from ZDNet: _Connected medical devices [are twice as likely to be vulnerable to the BlueKeep exploit than other devices on hospital networks](https://www.zdnet.com/article/cybersecurity-warning-almost-half-of-connected-medical-devices-are-vulnerable-to-hackers-exploiting-bluekeep/), putting patients and staff at additional risk from cyber attacks. This is especially concerning when healthcare is already such a popular target for hacking campaigns. BlueKeep is a vulnerability in Microsoft’s Remote Desktop Protocol (RDP) service which was [discovered last year](https://tech.slashdot.org/story/19/11/03/2331250/a-widespread-bluekeep-exploit-is-targetting-unpatched-windows-7xp-computers), and impacts Windows 7, Windows Server 2008 R2 and Windows Server 2008._

 

_According to figures in [a new report](https://www.cybermdx.com/resources/2020-vision-review-major-healthcare-it-cybersec-issues) from researchers at healthcare cybersecurity company CyberMDX, 22% of all Windows devices in a typical hospital are exposed to BlueKeep because they haven’t received the relevant patches. And when it comes to connected medical devices running on Windows, the figure rises to 45% – meaning almost half are vulnerable. Connected devices on hospital networks can include radiology equipment, monitors, x-ray and ultrasound devices, anesthesia machines and more. If these devices aren’t patched, it’s possible that destructive cyber attacks searching for machines vulnerable to BlueKeep could put hospital networks – and patients – at risk._ “One of the key problems for hospitals is that many devices are classed as obsolete: Windows 7, for example, is vulnerable to BlueKeep and no longer supported by Microsoft, but remains common across hospital networks,” adds ZDNet. “Any further vulnerabilities uncovered in Windows 7 – and other out-of-support operating systems – aren’t guaranteed security patches, leaving networks potentially at further risk going forward.”