ZOLL DefibDashboard Unrestricted Upload
ZOLL's DefibDashboard is a fleet management software for the R-Series of defibrillators. The Wi-Fi enabled defibrillators upload regular maintenance and diagnostic information to this dashboard system for readiness monitoring by biomedical engineering teams.
In affected versions of DefibDashboard a low-privileged user can upload dangerous files to the Device Check File (DCF) facility, resulting in the ability to execute arbitrary commands on the underlying operating system.
For details on this and other responsibly disclosed DefibDashboard vulnerabilities see https://us-cert.cisa.gov/ics/advisories/icsma-21-161-01.