Find your solution
From state-of-the-art medical devices to innovative software, we’ve designed our solutions to empower you to save more lives. Find out how ZOLL hospital solutions can support your clinical team.
Connect with an expertIf you’d like to receive cybersecurity updates from ZOLL, please join our cybersecurity mailing list.
Below are Cybersecurity Advisories on known vulnerabilities and if they have any impact on ZOLL® products.
We are aware of the recently reported PHP (PHP2Shell) critical vulnerabilities and will take appropriate action if any systems are affected. We have no evidence of customer impact at this time.
A security vulnerability was identified in the obsolete “ZOLL® ePCR IOS Mobile Application,” a legacy application that was decommissioned by ZOLL and removed from the Apple® App Store in May 2025.
CISA ICS Medical Advisory: https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-041-01
National Vulnerability Database CVE Entry: https://nvd.nist.gov/vuln/detail/CVE-2025-12699
Apache confirmed that a critical Remote Code Execution vulnerability exists in their Log4j utility (CVE-2021-44228). Log4j is an open source, Java-based logging utility.
ZOLL conducted an evaluation and found indications that no products are impacted.
Nucleus RTOS is a real-time operating system (RTOS) used in many different embedded software solutions. Forescout and the Cybersecurity and Infrastructure Security Agency (CISA) issued reports detailing 13 vulnerabilities in the Nucleus Net component.
ZOLL conducted an evaluation and found indications that no products are impacted.
Security vulnerabilities were discovered in an older version of ZOLL's Defibrillator Dashboard® software program. These vulnerabilities were resolved in version 2.2.
ZOLL contacted customers to advise them to upgrade to the latest version of Defibrillator Dashboard.
Download our 2020 and 2021 customer notifications.
Cybersecurity