Assessment of Cybersecurity Vulnerabilities in Networked Medical Devices at Nigerian Teaching Hospitals

The increasing connectivity of medical devices to hospital networks in Nigerian teaching hospitals introduces cybersecurity vulnerabilities that can compromise patient data privacy, device functionality, and clinical operations, yet cybersecurity risk awareness and management in Nigerian health facilities is rudimentary. This study assesses cybersecurity vulnerabilities in networked medical devices at four Nigerian teaching hospitals in Lagos, Abuja, Enugu, and Kano. A non-intrusive vulnerability assessment methodology was applied, combining network device enumeration using passive scanning tools, firmware version inventory comparison against published vulnerability databases, network segmentation assessment, authentication configuration review for networked devices, and structured interviews with IT and biomedical engineering staff. A total of two hundred and fourteen network-connected medical devices were inventoried across the four facilities. Firmware assessment revealed that sixty-seven percent of inventoried devices were running firmware versions with at least one published security vulnerability, including devices with critical unpatched vulnerabilities in remote access interfaces. Network segmentation was absent at three facilities, meaning medical devices shared network segments with administrative computers and guest Wi-Fi. Default factory passwords were found on thirty-one percent of assessed network-connected devices. Remote access to devices via the internet without VPN protection was identified at two facilities. No facility had a documented medical device cybersecurity policy or incident response plan. The study identifies significant systemic cybersecurity risk and recommends urgent implementation of network segmentation, default credential remediation, and a medical device cybersecurity governance policy at Nigerian teaching hospitals. Keywords: cybersecurity, networked medical devices, teaching hospitals, vulnerability assessment, patient safety.