One would assume that medical device vendors could pay for extended support. However, even extended support for HEL 5 has ended now. And even before that in hea

One would assume that medical device vendors could pay for extended support. However, even extended support for HEL 5 has ended now. And even before that in heavily regulated industry that uses such old stuff I would assume rolling out updates is a very slow progress. Maybe not all that stuff connects to the internet, but I bet an ever increasing share does. So hospitals might have wose firewalls than others, so I would not surprised about such equipment being successfully attacked. Of course old versions are unaffected because by newly introduced vulnerabilities. But old ones that have existed "forever" get detected. I guess it's not the kernal alone that is so old, but user space, too.