Background
Terumo Blood and Cell Technologies is aware of the recently published Oracle Database Components cybersecurity vulnerabilities (CVE-2021-2035, CVE-2021-2018, CVE-2021-2054, CVE-2021-2116, CVE-2021-2117, CVE-2021-1993, CVE-2021-2045, CVE-2021-2000).
As a result, product technical teams have performed technical assessments to determine if the vulnerabilities present a measurable cybersecurity risk.
Response
Terumo Blood and Cell Technologies has confirmed the impact to the following list of products by the Oracle Database Component vulnerabilities.
Terumo Blood and Cell Technologies products that are confirmed to be unaffected by the Oracle Database Component vulnerabilities –
The product list below is available to customers to help identify existing Terumo Blood and Cell Technologies products that have been confirmed to be unaffected by the recently published Oracle Database Component vulnerabilities. The list provided below is not comprehensive and may be updated over time. It does not indicate the patch or device status.
- Reveos® Automated Blood Processing System
- FINIA® Fill and Finish System
- Cell Processing Application
- Trima Accel® Procedure Summary
- Trima Accel® Automated Blood Collection System
- Quantum® Cell Expansion System
- Cadence® Data Collection System
- Spectra Optia® Apheresis System
- Mirasol® Pathogen Reduction Technology
- InfoVu
- Trima KPI Dashboard
- TOMEs - Terumo Operational Medical Equipment Software
- T-ACE II+ - Terumo Automatic Component Extractor
- Trucise® Data Management System
Terumo Blood and Cell Technologies products that are confirmed to be susceptible to the Oracle Database Component vulnerabilities –
The product list below is available to customers to help identify existing Terumo Blood and Cell Technologies products that have been confirmed to be susceptible to the recently published Oracle Database Component vulnerabilities. The list provided below is not comprehensive and may be updated over time. It does not indicate the patch or device status.
-
Vista® Information System
- Oracle 12c for use with Vista Information System v4.2
- Oracle 19c for use with Vista Information System v4.2.1
Customers that maintain patches independent of Terumo Blood and Cell Technologies delivery should ensure these actions are performed as the acting responsible entity in order to maintain the correct security posture of the system(s).