Skip to main content
IRIC safety alert

Safety Action Notice – SAN2202

Published on 12 January 2022

From: Health Facilities Scotland

SAN2202 - Medical devices and cybersecurity: LOG4J2 Vulnerabilities (CVE-2021-44228)



Several security vulnerabilities have been identified which affects a wide range of IT systems making them vulnerable to attack. Medical devices connected to networks and their supporting systems are also vulnerable which means their safety and performance may be adversely affected.