Disclaimer: This site aggregates publicly available data from official government sources (FDA, ClinicalTrials.gov, PubMed, SEC EDGAR) for general reference only. It does NOT constitute medical advice, diagnosis, treatment recommendations, or investment advice.

Open, Classified

Catalys Precision Laser System, Models: Catalys-U (United States), Catalys-I (International), Catalys-C (China); and Catalys Precision Laser System No Bed, Models: 0160-6020 (United States), 0160-6010 (International)

FDA Recall Z-0444-2022 · Posted None

Recalling FirmAMO Manufacturing USA, LLC
Recall StatusOpen, Classified
Product CodeOOE
Date Initiated2021-10-21
Product Quantity546

Reason for Recall

Aberrometer and precision laser systems are affected by a remote code execution vulnerability existing when the Microsoft Windows Print Spooler service is enabled, and improperly performs privileged file operations. This could be exploited to run arbitrary code with SYSTEM privileges, allowing for program installation; view/change/deleting data; or creation of new accounts with full user rights.

Firm Action

On 09/02/21, Microsoft "PrintNightmare" Vulnerability notices were sent to customers informing them of the upcoming software patches to remediate the vulnerability. This notice was posted on the recalling firm's website in the Security Advisories section. On 10/21/21 correction notices started being sent to customers. Customers were informed that Technical Service Representatives would contact then to schedule installation of the Windows OS patch. Customers were asked to do/ensure the following: 1) Complete the customer reply form, 2) To safeguard patients form potential harm and to inform them what to do in the event of product malfunction, customers were directed to specific parts of the Instructions for Use. 3) Confirm all measurements against baseline pre-operative manifest refraction and do not proceed when outside of recommended limits of difference, for sphere, cylinder and axis, as specified in the operators manual and training material. 4) Maintain manual records of patient measurements. 5) Ensure you comply with obligations under applicable privacy laws relating to putting in place safeguards in connection with personal information for patients. Customers with additional questions were encouraged to call Technical Support at 1 (800)- 511-0911.

Root Cause

Software design

Distribution Pattern

US: CA, TX, FL, LA, MD, IA, MA, VA, SD, MN, MO, NC, TN, SC, WA, NV, OH, KY, IN, CO, NJ, OK, NH, UT, AR, NY, AK, ND, NE, IL, AL, HI, CT, DE, KS, GA, OR, MS, PA, MT, ME, MI, AZ, ID, WI, VT, NM, CA. OUS: Canada, Mexico, Russian Federation, Turkey, Brazil, Egypt, Iraq, Saudi Arabia, Jordan, Norway, Colombia, Germany, Malaysia, India, Oman, Azerbaijan, Canada, Slovakia, Lebanon, Spain, Ireland, Italy, South Korea, Bangladesh, Chile, Taiwan, Tunisia, Kazakhstan, Libya, Argentina, Singapore, Austria, Australia, Vietnam, Greece, Poland, Indonesia, Yemen, Great Britain, South Africa, Croatia, France, Czech Republic, Algeria, Thailand, Bulgaria, United Arab Emirates, Belgium, Japan, China, Nepal, Israel, Switzerland, Dominican Republic, Hong Kong, Portugal, Ecuador, Kuwait, Netherlands, Slovenia, Philippines

Related FDA 510(k) Records

Devices referenced by this recall via K-numbers.

K113479OPTIMEDICA CATALYS PRECISION LASER SYSTEMOptimedica Corporation · 2011-12-21

Official Source

View FDA Recall →

Source: FDA Enforcement Report / Recall database. Always confirm against the official FDA record.

↑