Skip to content
OpenAdvisories
Critical ICSMA-20-343-01 2 CVEs

GE Healthcare Imaging and Ultrasound Products

Published Dec 8, 2020 · Updated Dec 8, 2020

Vendor: GE Healthcare Product: 1.5T Brivo MR355 Product: 1.5T Signa Hdx Product: 3.0T Signa Hdxt Product: 3.0T Signa HDXx Product: Alaris PC Unit Product: AMX 700 Product: AW Product: AWS Product: BrightSpeed Edge Product: BrightSpeed Edge Select Product: BrightSpeed Elite Product: BrightSpeed Elite Select Product: Brivio NM 615 Product: Brivo CT385 Product: Brivo XR118 Product: Brivo XR383 Product: Brivo XR515 Product: Brivo XR575 Product: Definium 5000 Product: Definium 6000 Product: Definium 8000 Product: Discovery CT590RT Product: Discovery CT750HD Product: Discovery IQ Product: Discovery MI MI DR Product: Discovery NM 630 Product: Discovery NM 750b Product: Discovery NM D530c Product: Discovery NM/CT 670 +76 more

Summary

Successful exploitation of these vulnerabilities could occur if an attacker gains access to the healthcare delivery organization 's (HDO) network. If exploited, these vulnerabilities could allow an attacker to gain access to affected devices in a way that is comparable with GE (remote) service user privileges. A successful exploitation could expose sensitive data such as a limited set of patient health information (PHI) or could allow the attacker to run arbitrary code, which might impact the availability of the system and allow manipulation of PHI.

Vulnerabilities 2

  • Unscored —
    CVE-2020-25175

    GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the ne…

  • Unscored —
    CVE-2020-25179

    GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the ne…

Revision history

  1. #1

    ICSMA-20-343-01 GE Healthcare Imaging and Ultrasound Products

References