← Back to home
ICSMA-20-343-01  ·  Published 2020-12-08  ·  View on CISA ICS-CERT ↗

GE Healthcare Imaging and Ultrasound Products

CVSS 9.8 CRITICAL

Risk Summary

Successful exploitation of these vulnerabilities could occur if an attacker gains access to the healthcare delivery organization 's (HDO) network. If exploited, these vulnerabilities could allow an attacker to gain access to affected devices in a way that is comparable with GE (remote) service user privileges. A successful exploitation could expose sensitive data such as a limited set of patient health information (PHI) or could allow the attacker to run arbitrary code, which might impact the availability of the system and allow manipulation of PHI.

CVEs (2)

Remediations

  • GE has identified mitigations for specific products and releases and will take proactive measures to ensure proper configuration of the product firewall protection and change default passwords on impacted devices where possible. GE recommends users refer to the GE Healthcare Product Security Portal for more details on mitigations and how proactive actions may apply to affected devices.
  • In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:

Affected Vendors

GE Healthcare

Affected Products (107)

GE Healthcare · 3.0T Signa Hdxt HD 16 | HD23
GE Healthcare · 3.0T Signa HDXx HD 16 | HD23
GE Healthcare · 1.5T Brivo MR355 SV20.1 | SV23.0
GE Healthcare · Optima MR360 SV20.1 | SV23.0
GE Healthcare · 1.5T Signa Hdx HD 16 | HD23
GE Healthcare · 1.5T Signa Hdx HD 16 | HD23
GE Healthcare · Signa Hdi HD 16 | HD23
GE Healthcare · Signa VIBRANT HD 16 | HD23
GE Healthcare · LOGIQ 5 BT03
GE Healthcare · LOGIQ 7 BT03 | BT04 | BT06
GE Healthcare · LOGIQ 9 BT02 | BT03 | BT04 | BT06
GE Healthcare · Vivid I BT06
GE Healthcare · Vivid 7 >=BT02 | <= BT06
GE Healthcare · EchoPAC (Turnkey) BT06
GE Healthcare · Image Vault (Turnkey) 4.3
GE Healthcare · Voluson 730 BT05 | BT08
GE Healthcare · AW >= 4.0 | <= 4.6
GE Healthcare · AWS >= 2.0 | <= 3.0
GE Healthcare · Innova 2000 vers:all/*
GE Healthcare · Innova 3100 vers:all/*
GE Healthcare · Innova 4100 vers:all/*
GE Healthcare · Innova 2100-IQ vers:all/*
GE Healthcare · Innova 3100-IQ vers:all/*
GE Healthcare · Innova 4100-IQ vers:all/*
GE Healthcare · Innova 212-IQ vers:all/*
GE Healthcare · Innova 313-IQ vers:all/*
GE Healthcare · Optima 320 vers:all/*
GE Healthcare · Optima CL320i vers:all/*
GE Healthcare · Optima CL323i vers:all/*
GE Healthcare · Optima CL320 vers:all/*
GE Healthcare · Optima 3100 vers:all/*
GE Healthcare · Optima IGS 320 vers:all/*
GE Healthcare · Optima IGS 330 vers:all/*
GE Healthcare · Innova IGS 5x0 vers:all/*
GE Healthcare · Innova IGS 6x0 vers:all/*
GE Healthcare · Innova IGS 7x0 vers:all/*
GE Healthcare · Brivo XR118 vers:all/*
GE Healthcare · Brivo XR383 vers:all/*
GE Healthcare · Brivo XR515 vers:all/*
GE Healthcare · Brivo XR575 vers:all/*
GE Healthcare · Definium 5000 vers:all/*
GE Healthcare · Definium 6000 vers:all/*
GE Healthcare · Definium 8000 vers:all/*
GE Healthcare · AMX 700 vers:all/*
GE Healthcare · Discovery Xr650 vers:all/*
GE Healthcare · Discovery XR656 vers:all/*
GE Healthcare · Discovery XR656+ vers:all/*
GE Healthcare · Optima XR640 vers:all/*
GE Healthcare · Optima XR646 vers:all/*
GE Healthcare · Optima XR220amx vers:all/*
GE Healthcare · Optima XR200amx vers:all/*
GE Healthcare · Precision 500D vers:all/*
GE Healthcare · Precision WDR1 vers:all/*
GE Healthcare · Seno 200D vers:all/*
GE Healthcare · Seno DS vers:all/*
GE Healthcare · Essential vers:all/*
GE Healthcare · Senographe Pristina vers:all/*
GE Healthcare · BrightSpeed Elite vers:all/*
GE Healthcare · BrightSpeed Elite Select vers:all/*
GE Healthcare · BrightSpeed Edge vers:all/*
GE Healthcare · BrightSpeed Edge Select vers:all/*
GE Healthcare · Brivo CT385 vers:all/*
GE Healthcare · Discovery CT590RT vers:all/*
GE Healthcare · Discovery CT750HD vers:all/*
GE Healthcare · LightSpeed VCT vers:all/*
GE Healthcare · LightSpeed Pro16 vers:all/*
GE Healthcare · LightSpeed RT16 vers:all/*
GE Healthcare · Optima Advance vers:all/*
GE Healthcare · Optima CT520 vers:all/*
GE Healthcare · Optima CT540 vers:all/*
GE Healthcare · Optima CT660 vers:all/*
GE Healthcare · Optima CT580 vers:all/*
GE Healthcare · Optima CT580RT vers:all/*
GE Healthcare · Optima CT580W vers:all/*
GE Healthcare · Optima CT670 vers:all/*
GE Healthcare · Optima CT680 Quantum vers:all/*
GE Healthcare · Optima CT680 Expert vers:all/*
GE Healthcare · Optima CT680 Professional vers:all/*
GE Healthcare · Revolution EVO vers:all/*
GE Healthcare · Revolution HD vers:all/*
GE Healthcare · Revolution HACT vers:all/*
GE Healthcare · Revolution ACTs vers:all/*
GE Healthcare · Revolution CT vers:all/*
GE Healthcare · Revolution Discover CT vers:all/*
GE Healthcare · Revolution Frontier vers:all/*
GE Healthcare · Revolution Frontier ES vers:all/*
GE Healthcare · Brivio NM 615 vers:all/*
GE Healthcare · Discovery NM 630 vers:all/*
GE Healthcare · Discovery NM 750b vers:all/*
GE Healthcare · Discovery NM D530c vers:all/*
GE Healthcare · Discovery NM/CT D570c vers:all/*
GE Healthcare · Discovery NM/CT 670 vers:all/*
GE Healthcare · Infinia vers:all/*
GE Healthcare · Discovery NM830 vers:all/*
GE Healthcare · Discovery NM/CT 860 vers:all/*
GE Healthcare · Discovery NM/CT 850 vers:all/*
GE Healthcare · Discovery NM/CT 870 vers:all/*
GE Healthcare · Discovery MI MI DR vers:all/*
GE Healthcare · Discovery IQ vers:all/*
GE Healthcare · Optima NM/CT640 vers:all/*
GE Healthcare · Ventri vers:all/*
GE Healthcare · Xeleris vers:all/*
GE Healthcare · PET Discovery IQ vers:all/*
GE Healthcare · PET Discovery IQ upgrade vers:all/*
GE Healthcare · PETrace 800 vers:all/*
GE Healthcare · GE Imaging and Ultrasound Products vers:all/*
GE Healthcare · Alaris PC Unit vers:all/*

Affected Sectors

Healthcare and Public Health

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more