Authentication Vulnerability in Algo Edge Component by Roche Diagnostics

CVE-2024-13026

What is CVE-2024-13026?

An authentication vulnerability has been identified in the Algo Edge component, which is part of the navify® Algorithm Suite, used in laboratory networks. This vulnerability affects versions up to 2.1.1 and allows an attacker with adjacent network access to potentially craft valid authentication tokens, thus gaining unauthorized access to the Algo Edge system. Other components of the navify® Algorithm Suite remain unaffected. Organizations utilizing this software should evaluate their security posture and consider updating to mitigate potential risks.

References