Response to Microsoft's end of support for Windows® 10 IoT Enterprise LTSB 2016 / Windows Server® 2016

Canon Security Advisory

Overview:
Microsoft announced the schedule for the end of support for Windows® 10 IoT Enterprise LTSB 2016 / Windows Server® 2016. We will inform the impact to Canon's medical products. 

Schedule for the end of support for Windows® 10 IoT Enterprise LTSB 2016／Windows Server® 2016:
The schedule for the end of support for Windows® 10 IoT Enterprise LTSB 2016／Windows Server® 2016 announced by Microsoft is as follows:

Possible Affected Canon Products:
The products which are using Windows® 10 IoT Enterprise LTSB 2016／Windows Server® 2016 as follows. 

・ Computed Tomography

・Ultrasound

・X-ray

・Molecular Imaging

After Microsoft's end of support for the OS, security patches will not be provided by Microsoft. Therefore, for the products using these OSs, it will not be possible to address security vulnerabilities through the application of security patches if security vulnerabilities are discovered in the OS. Please note that the security lifecycle refers only to matters related to cybersecurity support and is independent of the support period for this product.

Response to Microsoft's end of support:

• Provide vulnerability information affecting product safety
  We will inform customers of any vulnerabilities affecting product safety that have been identified at the time of the end of support for the relevant OS. Furthermore, if any new critical vulnerabilities related to the relevant OS are discovered, we will disclose information, including risk mitigation measures, on our website. 
  
  
• Provide information on upgradeable products
  We will inform customers of information on upgradeable products at the time of the end of support for the relevant OS. 
  
  
• Recommended measures for ensuring product security after the end of support for OS
  To ensure product security after the end of support for the relevant OS, we recommend the following measures:
  ① Application of the latest security updates
  ② Installation on a restricted network
  ③ Periodic network transaction audits
  ④ Restriction of transparent communication using firewalls, IDS, etc.
  ⑤ Management of operators of device through access logs, etc.

For any inquiries from customers regarding this matter, please contact your nearest branch office or sales office. For the contact information of the branch offices and sales offices in each region, please refer to the “Global Network (Countries and Regions)” page below. 

https://global.medical.canon/about-us/medical-group-global-network/