Explore Your Local Site

Looks like you've landed on our   site. Let's take you home:    

Please note that the content and products on the    site might not be available in your region.


Continue on the current website:  


Information Technology Advisory

Bayer focuses on vigilance, innovation, transparency, and data integrity in its efforts to protect your data.



December 20, 2023

Re: NextGen Mirth Connect to Calantic™ Digital Solutions

Dear Valued Customer

Bayer is aware of the recently disclosed vulnerabilities in Mirth® Connect, Connect, a third-party, open-source healthcare data integration platform. These vulnerabilities impact NextGen Mirth Connect 4.4.0 and prior versions. The vulnerabilities allow attackers to remotely execute arbitrary commands on the hosting server. (CVE-2023-37679 and CVE-2023-43208).

The Bayer Radiology Cybersecurity team has conducted risk and vulnerability assessments to determine potential impact to the safety and effectiveness of Bayer Radiology products. For the Calantic Product we have identified a potential safety risk related to this vulnerability. The probability of a critical harm is remote, but Bayer strongly encourages customers to implement the remediation outlined in this letter. Bayer is proactively reaching out to customers through this communication.

If your organization is using Calantic Edge 1.1 or older:     

  • Mirth Connect is a third-party component that is installed with the Calantic Edge software.
  • The vulnerability affects the Mirth Administrative Portal. This portal is not used during normal workflow.
  • To mitigate this vulnerability, if you have not already done so, we recommend that customers verify that ports 8081 and 8443 are blocked via Windows Firewall, to prevent remote launching of the Administrative Portal
  • A future update to the Calantic Edge software with the resolution to this vulnerability provided by NextGen is currently being developed and will be released in the future.

If you have any questions or concerns, we want to hear from you. Please contact our Bayer support team at 1-800-633-7237, press 1, press 2 for Radimetrics and Calantic Service or by email at solutionssupport@bayer.com


Scott Bristol      
Head, Digital Solutions Group Cybersecurity.