The Recall Desk
SevereFDA (Devices)·Z-1430-2020·Announced 2020-03-11

Remisol Advance software recalled for remote code execution vulnerability

Normand-Info S.A.S.U. is recalling Remisol Advance software running on unsupported Windows operating systems due to a critical remote code execution vulnerability.

What this means for you

Illness, injury, or structural failure has been reported. Stop using the product immediately and contact the manufacturer for a refund or repair.

Our severity reasoning: The source text explicitly describes a 'critical remote code execution vulnerability' that allows an attacker to 'execute arbitrary code' and 'create new accounts with full user rights.' This aligns with the rubric's criterion for 'significant injury/property-damage reports' or high-risk security defects that compromise system integrity and data, warranting a Severe classification.

Plain-English summary

Normand-Info S.A.S.U. is recalling Remisol Advance software that runs on hardware with Windows XP, Windows 7, Windows Server 2003, and Windows Server 2008 operating systems. The recall involves 6,479 units distributed across 50 states and the District of Columbia. All serial numbers are affected.

The recall is due to a critical remote code execution vulnerability in remote desktop services. This vulnerability can be exploited remotely without authentication. An attacker who successfully exploits this vulnerability could execute arbitrary code on the target system, install programs, view, change, or delete data, or create new accounts with full user rights. If the vulnerability is exploited locally, it would lock down the computer.

A patch was released for this vulnerability. Users of the affected software should apply the patch to mitigate the risk of unauthorized access and data compromise.

The recalled product

Product
Remisol Advance running on hardware with Windows XP, Windows 7, Windows Server 2003 and Windows Server 2008 operating systems
Manufacturer
Normand-Info S.A.S.U.
Category
Medical Device — Software
Hazard
Affected units
6,479

Is your product affected?

Check your packaging against the codes below. If any of them match, the product is part of this recall.

Lot numbers (1)

  • All serial numbers

Distribution

Distributed in 51 states:

Related recalls

Same manufacturer · Normand-Info S.A.S.U.

See all →

Same hazard · remote code execution

See all →