CISA Warns All Pulsetto Vagus Nerve Stimulators Have Unpatched Bluetooth Vulnerability That Could Allow Attackers to Disable Safety Mechanisms

CISA is warning Pulsetto vagus nerve stimulator users about a Bluetooth vulnerability that could allow a nearby attacker to alter stimulation settings or disable electrical safety mechanisms. Jojo Photos/Shutterstock

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an official medical device security advisory warning that all versions of the Pulsetto Vagus Nerve Stimulator contain a significant cybersecurity vulnerability that could allow an attacker to disable the device’s electrical safety mechanisms or alter its stimulation output settings.

Hidden Bluetooth Commands Create a Security Risk