Critical bug allows attacker to remotely control medical robot