GE Healthcare Ultrasound products (Update A)

Risk Summary

Successful exploitation of these vulnerabilities could allow an attacker with physical access to gain access to the operating system of affected devices.

CVEs (2)

Remediations

• GE Healthcare recommends organizations restrict physical access to devices by unauthorized individuals. Additionally, where available, GE Healthcare recommends users enable the "system lock" password in the Administration GUI menu if possible. This will require a password to be entered before the system can be accessed. The ‘system lock' would limit non-authenticated users from accessing the application.
• GE Healthcare recommends that users with questions reach out to a GE Healthcare service representative and users with an active support account visit the GE Healthcare product security portal (login required).

Affected Vendors

Affected Products (6)

Affected Sectors

Healthcare and Public Health