Windows Print Spooler Remote Code Execution Vulnerability

Background

On July 6th, 2021, Microsoft released a patch for a critical Remote Code Execution vulnerability in the Microsoft Windows Print Spooler service (CVE-2021-34527). The Microsoft Windows Print Spooler service fails to restrict access to functionality that allows users to add printers and related drivers, which can allow a remote authenticated attacker to execute arbitrary code with SYSTEM privileges on a vulnerable system.

This vulnerability impacts Windows 7, Windows 8.1, Windows 10, Windows Server 2008, Windows Server 2012, Windows Server 2016, Windows Server 2019.

Response

Beckman Coulter’s research and development teams are analyzing the Microsoft patch for CVE-2021-34527 and a related vulnerability (CVE-2021-1675) for impact to affected products. Where applicable, remediation for this vulnerability will be provided as soon as possible, including how to apply the patch to affected systems.

Updates on affected Beckman Coulter Life Sciences products will be published as soon as information becomes available.

For further information regarding affected products, please see the table below:

Product Line Model Name Recommendations and Comments
Cell Viability Vi-CELL BLU This product does not require local or network printing capability. Please check back later for updated information.
Cell Viability Vi-CELL MetaFLEX This product does not require local or network printing capability. Please check back later for updated information.
Centrifuge Avanti JXN 26 Beckman Coulter Life Sciences recommends isolating or utilizing a closed network for this product.
Centrifuge Avanti JXN 30 Beckman Coulter Life Sciences recommends isolating or utilizing a closed network for this product.
Centrifuge Optima XE Beckman Coulter Life Sciences recommends isolating or utilizing a closed network for this product.
Centrifuge Optima XPN Beckman Coulter Life Sciences recommends isolating or utilizing a closed network for this product.
Cytometry AQUIOS CL Windows 7: Beckman only supports network connectivity through the PROservice hardware firewall (RAP box) without an additional connection to the lab's network. In this configuration the system is not vulnerable to network infection. Instructions are available to securely route system connectivity to file share, middleware and network printing.
Cytometry AQUIOS CL Windows 10: Patch is now available from RSU. Please refer to Security section of IFU for further instruction.
Cytometry CytoFLEX Patch is now available from RSU. Please refer to Security section of IFU for further instruction.
Cytometry CytoFLEX LX Patch is now available from RSU. Please refer to Security section of IFU for further instruction.
Cytometry CytoFLEX S Patch is now available from RSU. Please refer to Security section of IFU for further instruction.
Cytometry CytoFLEX SRT Patch is now available from RSU. Please refer to Security section of IFU for further instruction.
Cytometry DxFLEX Patch is now available from RSU. Please refer to Security section of IFU for further instruction.
Cytometry Kaluza A Patch is now available from RSU. Please refer to Security section of IFU for further instruction.
Cytometry Kaluza C Patch is now available from RSU. Please refer to Security section of IFU for further instruction.
Cytometry MoFlo Astrios Beckman Coulter Life Sciences recommends isolating or utilizing a closed network for this product.
Cytometry Navios Beckman Coulter Life Sciences recommends isolating or utilizing a closed network for this product.
Cytometry Navios EX Windows 7: Beckman only supports network connectivity through the PROservice hardware firewall (RAP box) without an additional connection to the lab's network. In this configuration the system is not vulnerable to network infection. Instructions are available to securely route system connectivity to file share, middleware and network printing.
Cytometry Navios EX Windows 10: Patch is now available from RSU. Please refer to Security section of IFU for further instruction.
Lab Automation Biomek FX/FXp Beckman Coulter Life Sciences recommends isolating or utilizing a closed network for this product.
Lab Automation Biomek NX/NXp Beckman Coulter Life Sciences recommends isolating or utilizing a closed network for this product.
Lab Automation Biomek 4000 Beckman Coulter Life Sciences recommends isolating or utilizing a closed network for this product.
Lab Automation Biomek i5 Beckman Coulter Life Sciences recommends isolating or utilizing a closed network for this product.
Lab Automation Biomek i7 Beckman Coulter Life Sciences recommends isolating or utilizing a closed network for this product.
Lab Automation Labcyte Access Beckman Coulter Life Sciences recommends isolating or utilizing a closed network for this product.
Lab Automation Labcyte Echo 525 Beckman Coulter Life Sciences recommends isolating or utilizing a closed network for this product.
Lab Automation Labcyte Echo 550 series Beckman Coulter Life Sciences recommends isolating or utilizing a closed network for this product.
Lab Automation Labcyte Echo 650 Series Beckman Coulter Life Sciences recommends isolating or utilizing a closed network for this product.
Particle Characterization LS 13320 Beckman Coulter Life Sciences recommends isolating or utilizing a closed network for this product.
Particle Characterization LS 13320 XR Beckman Coulter Life Sciences recommends isolating or utilizing a closed network for this product.
Particle Characterization Multisizer 4e Beckman Coulter Life Sciences recommends isolating or utilizing a closed network for this product.
Particle Counting HIAC 8011+ Beckman Coulter Life Sciences recommends isolating or utilizing a closed network for this product.
Particle Counting MET ONE 3400+ Beckman Coulter Life Sciences recommends isolating or utilizing a closed network for this product.
Particle Counting MET ONE 6000 Beckman Coulter Life Sciences recommends isolating or utilizing a closed network for this product.
Particle Counting MET ONE HHPC+ Beckman Coulter Life Sciences recommends isolating or utilizing a closed network for this product.