CYBERSECURITY ALERT - LOG4J - CVE-2021-44228

FUJIFILM Sonosite, Inc. ("Sonosite") is aware of the security advisory published by NIST regarding: CVE-2021-44228

We have evaluated the potential impact on our ultrasound systems. We have determined that our ultrasound systems are not affected by this issue. Our systems do not use a version of the log4j library that is vulnerable to the exploit. The systems listed below are not affected by any of these CVEs listed above:

• Sonosite PX ultrasound system
• Sonosite Edge II ultrasound system
• Sonosite SII ultrasound system
• Sonosite iViz ultrasound system
• Sonosite X-Porte ultrasound system
• Sonosite Edge ultrasound system
• Sonosite NanoMaxx ultrasound system
• Sonosite M-Turbo ultrasound system
• Sonosite S Series ultrasound systems
• Sonosite MicroMaxx ultrasound system
• Sonosite Titan ultrasound system
• Sonosite iLook ultrasound system
• Sonosite 180 ultrasound system
• Sonosite SonoHeart ultrasound system
• FUJIFILM FC1 ultrasound system

Sonosite systems that are affected by the vulnerability are:

• Sonosite Synchronicity

Sonosite Synchronicity contains two microservices which utilise log4j-core-2.6.2 and therefore are affected by this vulnerability. Sonosite has developed a correction and will contact our customers to instal this mitigation.

Sonosite remains committed to the safety and security of its customers, any further questions can be directed to Sonosite technical support:

Phone (U.S. or Canada) (877) 657-8118

Phone (Outside U.S. or Canada) (425) 951-1330, or call your local representative

Fax: (425) 951-6700