Strategy and Solutions

Close

Discover our digital transformation stories and the impact driving real change

Medical Device Manufacturer Secures IoMT Infusion Pump Platform

About the Client

A global medical device OEM producing connected infusion pumps for hospital deployment. The company was preparing a 10,000‑unit rollout and needed to satisfy FDA 510(k) cybersecurity expectations and hospital security reviews.The solution included bedside devices, BLE connectivity, OTA updates, a cloud dashboard, and FHIR integration.

Key Outcomes

19 Security Vulnerabilities Identified and Addressed
FDA Pre‑Submission Cybersecurity Review Passed with Zero Major Findings

Business Challenges

Security testing had been limited, leaving potential issues in firmware, update mechanisms, and cloud communication. Any exploit affecting dosage commands, uptime, or telemetry could impact patient safety and jeopardize large contracts.The OEM required an independent security assessment and a clear remediation plan aligned with regulatory expectations.

Business Impacts / Key Results Achieved

With Zymr’s support, the manufacturer:

  • Uncovered 19 issues across firmware, BLE, OTA, and cloud APIs
  • Implemented secure boot, TLS 1.3, and stronger device identity
  • Improved monitoring and alerting for anomalous device behavior
  • Cleared FDA pre‑submission cybersecurity review without major findings

Strategy and Solutions

IoMT Security Assessment

  • Tested BLE firmware, OTA update flows, cloud dashboard, and FHIR pipelines
  • Focused on command injection, replay attacks, and privilege escalation

Device and Cloud Hardening

  • Enabled signed firmware and secure boot
  • Enforced TLS 1.3 and device certificates for pump‑to‑cloud traffic

Compliance Support• Aligned documentation and controls with FDA and NIST 800‑213 guidance• Helped respond to hospital security questionnaires with clear evidence of controls

Show More
Request A Copy
Zymr - Case Study

Latest Case Studies

With Zymr you can