CVE-2020-25179

🗓️ 14 Dec 2020 16:12:36Reported by icscertType

GE Healthcare Imaging and Ultrasound Products may expose credentials during network transport

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of GE Healthcare’s medical diagnostic equipment lies in the lack of protection for operational data. This allows unauthorized individuals to gain access to protected information or enhance their privileges.	30 Mar 202100:00	–	bdu_fstec
Circl	CVE-2020-25179	14 Dec 202020:39	–	circl
CNNVD	General Electric Healthcare Imaging and Ultrasound Information Disclosure Vulnerability	8 Dec 202000:00	–	cnnvd
Cvelist	CVE-2020-25179	14 Dec 202016:12	–	cvelist
EUVD	EUVD-2020-17870	7 Oct 202500:30	–	euvd
NVD	CVE-2020-25179	14 Dec 202017:15	–	nvd
Prion	Code injection	14 Dec 202017:15	–	prion
RedhatCVE	CVE-2020-25179	22 May 202517:01	–	redhatcve
ThreatPost	Critical, Unpatched Bug Opens GE Radiological Devices to Remote Code Execution	8 Dec 202017:00	–	threatpost
Trellix	Connected Healthcare: A Cybersecurity Battlefield We Must Win	6 Jun 202200:00	–	trellix

NVD

Vulners

Node

gehealthcare 3.0t_signa_hdxt_firmwareMatch-

AND

gehealthcare 3.0t_signa_hdxtMatch-

Node

gehealthcare 3.0t_signa_hd_16_firmwareMatch-

AND

gehealthcare 3.0t_signa_hd_16Match-

Node

gehealthcare 3.0t_signa_hd_23_firmwareMatch-

AND

gehealthcare 3.0t_signa_hd_23Match-

Node

gehealthcare 1.5t_brivo_mr355_firmwareMatch-

AND

gehealthcare 1.5t_brivo_mr355Match-

Node

gehealthcare optima_mr360_firmwareMatch-

AND

gehealthcare optima_mr360Match-

Node

gehealthcare signa_hdi_1.5t_firmwareMatch-

AND

gehealthcare signa_hdi_1.5tMatch-

Node

gehealthcare signa_vibrant_firmwareMatch-

AND

gehealthcare signa_vibrantMatch-

Node

gehealthcare logiq_5_bt03_firmwareMatch-

AND

gehealthcare logiq_5_bt03Match-

Node

gehealthcare logiq_7_bt03_firmwareMatch-

AND

gehealthcare logiq_7_bt03Match-

Node

gehealthcare logiq_7_bt04_firmwareMatch-

AND

gehealthcare logiq_7_bt04Match-

Node

gehealthcare logiq_7_bt06_firmwareMatch-

AND

gehealthcare logiq_7_bt06Match-

Node

gehealthcare logiq_9_bt02_firmwareMatch-

AND

gehealthcare logiq_9_bt02Match-

Node

gehealthcare logiq_9_bt03_firmwareMatch-

AND

gehealthcare logiq_9_bt03Match-

Node

gehealthcare logiq_9_bt04_firmwareMatch-

AND

gehealthcare logiq_9_bt04Match-

Node

gehealthcare logiq_9_bt06_firmwareMatch-

AND

gehealthcare logiq_9_bt06Match-

Node

gehealthcare vivid_i_bt06_firmwareMatch-

AND

gehealthcare vivid_i_bt06Match-

Node

gehealthcare vivid_7_bt02_firmwareMatch-

AND

gehealthcare vivid_7_bt02Match-

Node

gehealthcare vivid_7_bt06_firmwareMatch-

AND

gehealthcare vivid_7_bt06Match-

Node

gehealthcare echopac_bt06_firmwareMatch-

AND

gehealthcare echopac_bt06Match-

Node

gehealthcare image_vault_firmwareMatch-

AND

gehealthcare image_vaultMatch-

Node

gehealthcare voluson_730_bt05_firmwareMatch-

AND

gehealthcare voluson_730_bt05Match-

Node

gehealthcare voluson_730_bt08_firmwareMatch-

AND

gehealthcare voluson_730_bt08Match-

Node

gehealthcare innova_2000_firmwareMatch-

AND

gehealthcare innova_2000Match-

Node

gehealthcare innova_3100_firmwareMatch-

AND

gehealthcare innova_3100Match-

Node

gehealthcare innova_4100_firmwareMatch-

AND

gehealthcare innova_4100Match-

Node

gehealthcare innova_2100-iq_firmwareMatch-

AND

gehealthcare innova_2100-iqMatch-

Node

gehealthcare innova_3100-iq_firmwareMatch-

AND

gehealthcare innova_3100-iqMatch-

Node

gehealthcare innova_4100-iq_firmwareMatch-

AND

gehealthcare innova_4100-iqMatch-

Node

gehealthcare innova_212-iq_firmwareMatch-

AND

gehealthcare innova_212-iqMatch-

Node

gehealthcare innova_313-iq_firmwareMatch-

AND

gehealthcare innova_313-iqMatch-

Node

gehealthcare optima_320_firmwareMatch-

AND

gehealthcare optima_320Match-

Node

gehealthcare optima_cl320i_firmwareMatch-

AND

gehealthcare optima_cl320iMatch-

Node

gehealthcare optima_cl323i_firmwareMatch-

AND

gehealthcare optima_cl323iMatch-

Node

gehealthcare optima_cl320_firmwareMatch-

AND

gehealthcare optima_cl320Match-

Node

gehealthcare optima_3100_firmwareMatch-

AND

gehealthcare optima_3100Match-

Node

gehealthcare optima_igs_320_firmwareMatch-

AND

gehealthcare optima_igs_320Match-

Node

gehealthcare optima_igs_330_firmwareMatch-

AND

gehealthcare optima_igs_330Match-

Node

gehealthcare innova_igs_520_firmwareMatch-

AND

gehealthcare innova_igs_520Match-

Node

gehealthcare innova_igs_530_firmwareMatch-

AND

gehealthcare innova_igs_530Match-

Node

gehealthcare innova_igs_620_firmwareMatch-

AND

gehealthcare innova_igs_620Match-

Node

gehealthcare innova_igs_630_firmwareMatch-

AND

gehealthcare innova_igs_630Match-

Node

gehealthcare innova_igs_730_firmwareMatch-

AND

gehealthcare innova_igs_730Match-

Node

gehealthcare brivo_xr118_firmwareMatch-

AND

gehealthcare brivo_xr118Match-

Node

gehealthcare brivo_xr383_firmwareMatch-

AND

gehealthcare brivo_xr383Match-

Node

gehealthcare brivo_xr515_firmwareMatch-

AND

gehealthcare brivo_xr515Match-

Node

gehealthcare brivo_xr575_firmwareMatch-

AND

gehealthcare brivo_xr575Match-

Node

gehealthcare brivo_definiu_firmwareMatch-

AND

gehealthcare brivo_definiuMatch-

Node

gehealthcare definium_5000_firmwareMatch-

AND

gehealthcare definium_5000Match-

Node

gehealthcare definium_6000_firmwareMatch-

AND

gehealthcare definium_6000Match-

Node

gehealthcare definium_8000_firmwareMatch-

AND

gehealthcare definium_8000Match-

Node

gehealthcare amx_700_firmwareMatch-

AND

gehealthcare amx_700Match-

Node

gehealthcare discovery_xr650_firmwareMatch-

AND

gehealthcare discovery_xr650Match-

Node

gehealthcare discovery_xr656_firmwareMatch-

AND

gehealthcare discovery_xr656Match-

Node

gehealthcare discovery_xr656+_firmwareMatch-

AND

gehealthcare discovery_xr656+Match-

Node

gehealthcare optima_xr640_firmwareMatch-

AND

gehealthcare optima_xr640Match-

Node

gehealthcare optima_xr646_firmwareMatch-

AND

gehealthcare optima_xr646Match-

Node

gehealthcare optima_xr220amx_firmwareMatch-

AND

gehealthcare optima_xr220amxMatch-

Node

gehealthcare optima_xr200amx_firmwareMatch-

AND

gehealthcare optima_xr200amxMatch-

Node

gehealthcare precision_500d_firmwareMatch-

AND

gehealthcare precision_500dMatch-

Node

gehealthcare wdr1_firmwareMatch-

AND

gehealthcare wdr1Match-

Node

gehealthcare seno_200d_firmwareMatch-

AND

gehealthcare seno_200dMatch-

Node

gehealthcare seno_ds_firmwareMatch-

AND

gehealthcare seno_dsMatch-

Node

gehealthcare seno_essential_firmwareMatch-

AND

gehealthcare seno_essentialMatch-

Node

gehealthcare senographe_pristina_firmwareMatch-

AND

gehealthcare senographe_pristinaMatch-

Node

gehealthcare brightspeed_elite_firmwareMatch-

AND

gehealthcare brightspeed_eliteMatch-

Node

gehealthcare brightspeed_elite_select_firmwareMatch-

AND

gehealthcare brightspeed_elite_selectMatch-

Node

gehealthcare brightspeed_edge_firmwareMatch-

AND

gehealthcare brightspeed_edgeMatch-

Node

gehealthcare brightspeed_edge_select_firmwareMatch-

AND

gehealthcare brightspeed_edge_selectMatch-

Node

gehealthcare brivo_ct385_firmwareMatch-

AND

gehealthcare brivo_ct385Match-

Node

gehealthcare discovery_ct590rt_firmwareMatch-

AND

gehealthcare discovery_ct590rtMatch-

Node

gehealthcare discovery_ct750hd_firmwareMatch-

AND

gehealthcare discovery_ct750hdMatch-

Node

gehealthcare lightspeed_vct_firmwareMatch-

AND

gehealthcare lightspeed_vctMatch-

Node

gehealthcare lightspeed_pro16_firmwareMatch-

AND

gehealthcare lightspeed_pro16Match-

Node

gehealthcare lightspeed_rt16_firmwareMatch-

AND

gehealthcare lightspeed_rt16Match-

Node

gehealthcare optima_advance_firmwareMatch-

AND

gehealthcare optima_advanceMatch-

Node

gehealthcare optima_ct520_firmwareMatch-

AND

gehealthcare optima_ct520Match-

Node

gehealthcare optima_ct540_firmwareMatch-

AND

gehealthcare optima_ct540Match-

Node

gehealthcare optima_ct660_firmwareMatch-

AND

gehealthcare optima_ct660Match-

Node

gehealthcare optima_ct580_firmwareMatch-

AND

gehealthcare optima_ct580Match-

Node

gehealthcare optima_ct580rt_firmwareMatch-

AND

gehealthcare optima_ct580rtMatch-

Node

gehealthcare optima_ct580w_firmwareMatch-

AND

gehealthcare optima_ct580wMatch-

Node

gehealthcare optima_ct670_firmwareMatch-

AND

gehealthcare optima_ct670Match-

Node

gehealthcare optima_ct68_firmwareMatch-

AND

gehealthcare optima_ct68Match-

Node

gehealthcare optima_quantum_firmwareMatch-

AND

gehealthcare optima_quantumMatch-

Node

gehealthcare optima_expert_&_professional_firmwareMatch-

AND

gehealthcare optima_expert_&_professionalMatch-

Node

gehealthcare revolution_evo_firmwareMatch-

AND

gehealthcare revolution_evoMatch-

Node

gehealthcare revolution_hd_firmwareMatch-

AND

gehealthcare revolution_hdMatch-

Node

gehealthcare revolution_act_firmwareMatch-

AND

gehealthcare revolution_actMatch-

Node

gehealthcare revolution_acts_firmwareMatch-

AND

gehealthcare revolution_actsMatch-

Node

gehealthcare revolution_ct_firmwareMatch-

AND

gehealthcare revolution_ctMatch-

Node

gehealthcare revolution_discovery_ct_firmwareMatch-

AND

gehealthcare revolution_discovery_ctMatch-

Node

gehealthcare revolution_frontier_firmwareMatch-

AND

gehealthcare revolution_frontierMatch-

Node

gehealthcare revolution_frontier_es_firmwareMatch-

AND

gehealthcare revolution_frontier_esMatch-

Node

gehealthcare brivo_nm_615_firmwareMatch-

AND

gehealthcare brivo_nm_615Match-

Node

gehealthcare discovery_nm_630_firmwareMatch-

AND

gehealthcare discovery_nm_630Match-

Node

gehealthcare discovery_nm_750b_firmwareMatch-

AND

gehealthcare discovery_nm_750bMatch-

Node

gehealthcare discovery_nm_d530c_firmwareMatch-

AND

gehealthcare discovery_nm_d530cMatch-

Node

gehealthcare discovery_nm/ct_d570c_firmwareMatch-

AND

gehealthcare discovery_nm/ct_d570cMatch-

Node

gehealthcare discovery_nm/ct_670_firmwareMatch-

AND

gehealthcare discovery_nm/ct_670Match-

Node

gehealthcare infinia_firmwareMatch-

AND

gehealthcare infiniaMatch-

Node

gehealthcare discovery_nm830_firmwareMatch-

AND

gehealthcare discovery_nm830Match-

Node

gehealthcare discovery_nm/ct_860_firmwareMatch-

AND

gehealthcare discovery_nm/ct_860Match-

Node

gehealthcare discovery_nm/ct850_firmwareMatch-

AND

gehealthcare discovery_nm/ct850Match-

Node

gehealthcare discovery_nm/ct_870_firmwareMatch-

AND

gehealthcare discovery_nm/ct_870Match-

Node

gehealthcare discovery_mi_mi_dr_firmwareMatch-

AND

gehealthcare discovery_mi_mi_drMatch-

Node

gehealthcare discovery_iq_firmwareMatch-

AND

gehealthcare discovery_iqMatch-

Node

gehealthcare optima_nm/ct_640_firmwareMatch-

AND

gehealthcare optima_nm/ct_640Match-

Node

gehealthcare ventri_firmwareMatch-

AND

gehealthcare ventriMatch-

Node

gehealthcare xeleris_firmwareMatch-

AND

gehealthcare xelerisMatch-

Node

gehealthcare pet_discovery_iq_firmwareMatch-

AND

gehealthcare pet_discovery_iqMatch-

Node

gehealthcare pet_discovery_iq_upgrade_firmwareMatch-

AND

gehealthcare pet_discovery_iq_upgradeMatch-

Node

gehealthcare petrace_800_firmwareMatch-

AND

gehealthcare petrace_800Match-

[
  {
    "product": "GE Healthcare Imaging and Ultrasound Products",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "MR 3.0T Signa HDxt / 3.0T Signa HDx, versions HD 16, HD23 1.5T Brivo MR355 / Optima MR360, versions SV20.1, SV23.0 1.5T Signa HDx / 1.5T Signa HDx, Signa HDi / Signa VIBRANT, versions HD16, HD23 Ultrasound, General Imaging LOGIQ 5 [BT03], LOGIQ 7 (BT03, BT04, BT06], LOGIQ 9 [BT02, BT03, BT04, BT06] Ultrasound, Cardiovascular Vivid I [BT06], Vivid 7 {BT02-BT06], EchoPAC (Turnkey) [BT06], Image Vault (Turnkey) [4.3] Ultrasound, Women’s Health Voluson 730 [BT05, BT08] Advanced Visualization AW 4.0 to AW 4.6, AWS2.0 to AW3.0 , Interventional Innova 2000, 3100, 4100, 2100-IQ, 3100-IQ, 4100-IQ, 212-IQ, 313-IQ Optima 320, CL320i, CL323i, CL320, 3100 Optima IGS 320, 330"
      },
      {
        "status": "affected",
        "version": "Innova IGS 5x0, 6x0, 7x0 Advanced Visualization AW 4.0 to AW 4.6, AWS2.0 to AW3.0 X-Ray Brivo XR118, XR383, XR515, XR575"
      },
      {
        "status": "affected",
        "version": "Definium 5000, 6000, 8000, AMX 700"
      },
      {
        "status": "affected",
        "version": "Discovery XR650, XR656, XR656+"
      },
      {
        "status": "affected",
        "version": "Optima XR640, XR646, XR220amx, XR200amx"
      },
      {
        "status": "affected",
        "version": "Precision 500D, WDR1 Mammography Seno 200D, DS, Essential"
      },
      {
        "status": "affected",
        "version": "Senographe Pristina Computed Tomography BrightSpeed Elite, Elite Select, Edge, Edge Select Brivo CT385 Discovery CT590RT, CT750HD LightSpeed VCT, Pro16, RT16 Optima Advance, CT520, CT540, CT660, CT580, CT580RT, CT580W, CT670, CT680 Quantum, Expert & Professional Revolution EVO,HD,ACT, ACTs, CT, Discovery CT, Frontier, Frontier ES Nuclear Medicine, PET/CT Brivo NM 615 Discovery NM 630, NM 750b, NM D530c, NM/CT D570c, NM/CT 670 Infinia Discovery NM830, NM/CT 860, NM/CT850, NM/CT 870"
      }
    ]
  }
]

Source	Link
us-cert	www.us-cert.cisa.gov/ics/advisories/icsma-20-343-01

21 Nov 2024 05:17Current

9.2High risk

Vulners AI Score9.2

CVSS 27.5

CVSS 3.19.8

EPSS0.00221

cve-2020-25179 ge healthcare imaging ultrasound network security credential exposure