VulnerabilityModified
CVE-2020-25175
GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.
CRITICAL 9.8EPSS 1.15%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.15%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 1.15% probability · 65th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-523, CWE-522
- Affected
- gehealthcare/3.0t signa hdxt firmware · gehealthcare/3.0t signa hd 16 firmware · gehealthcare/3.0t signa hd 23 firmware · gehealthcare/1.5t brivo mr355 firmware · gehealthcare/optima mr360 firmware · gehealthcare/signa hdi 1.5t firmware · gehealthcare/signa vibrant firmware · gehealthcare/logiq 5 bt03 firmware · gehealthcare/logiq 7 bt03 firmware · gehealthcare/logiq 7 bt04 firmware · gehealthcare/logiq 7 bt06 firmware · gehealthcare/logiq 9 bt02 firmware · gehealthcare/logiq 9 bt03 firmware · gehealthcare/logiq 9 bt04 firmware · gehealthcare/logiq 9 bt06 firmware · gehealthcare/vivid i bt06 firmware · gehealthcare/vivid 7 bt02 firmware · gehealthcare/vivid 7 bt06 firmware · gehealthcare/echopac bt06 firmware · gehealthcare/image vault firmware · +40 more
- Source
- ics-cert@hq.dhs.gov
References
- https://us-cert.cisa.gov/ics/advisories/icsma-20-343-01Third Party Advisory, US Government Resource
- https://us-cert.cisa.gov/ics/advisories/icsma-20-343-01Third Party Advisory, US Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.