CVE-2020-25175

CVE-2020-25175 affects GE Healthcare Imaging and Ultrasound Products. The flaw is unprotected transport of credentials (CWE-523), enabling credentials to be exposed over the network. Connected documentation confirms affected GE product lines across modalities (MR, Ultrasound, X-Ray, etc.) and lis...

CVE-2020-25179

CVE-2020-25179 affects GE Healthcare Imaging and Ultrasound Products. The issue involves unprotected transport of credentials and exposure of sensitive system information to an unauthorized control sphere, enabling credential exposure during network transport. Impact described in ICS advisory inc...

CVE-2020-25175: Unprotected Transport of Credentials

GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network...

PT-2020-15997

Name of the Vulnerable Software and Affected Versions GE Healthcare Imaging and Ultrasound Products affected versions not specified Description The issue concerns the exposure of specific credentials during transport over the network. Recommendations At the moment, there is no information about a...

CVE-2020-25179: Exposure of Sensitive System Information to an Unauthorized Control Sphere

GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network...

General Electric Healthcare Imaging and General Electric Healthcare Ultrasound Security Vulnerabilities

General Electric Healthcare Imaging and General Electric Healthcare Ultrasound are both products of General Electric, Inc.General Electric Healthcare Imaging is a medical imaging device. General Electric Healthcare Ultrasound is a medical sonography device. GE Imaging and Ultrasound Products have...

General Electric Healthcare Imaging and Ultrasound Information Disclosure Vulnerability

General Electric Healthcare Imaging and General Electric Healthcare Ultrasound are both products of General Electric, Inc.General Electric Healthcare Imaging is a medical imaging device. General Electric Healthcare Ultrasound is a medical sonography device. General Electric Healthcare Imaging and...

PT-2020-5735

Name of the Vulnerable Software and Affected Versions: GE Healthcare Imaging and Ultrasound Products affected versions not specified Description: The issue is related to the exposure of specific credentials during transport over the network due to a lack of protection for service data. This could...

Federated Learning: A Therapeutic for what Ails Digital Health

For researchers and physicians the mountains of data hospitals and healthcare systems hold could be a goldmine for artificial intelligence and machine learning, but data privacy concerns and regulations have kept scientists from being able to harness that information to improve outcomes. Now...

Cyberattack on UVM Health Network Impedes Chemotherapy Appointments

The University of Vermont UVM health network is scrambling to recover its systems after a cyberattack led to widespread delays in patient appointments – including chemotherapy appointments, as well as mammograms and biopsies. The UVM Health Network is a six-hospital, home-health and hospice syste...

HPSBPI03691 rev. 1 - HP Linux Imaging and Printing Software - Potential Memory Buffer Overflow

Potential Security Impact Memory Buffer Overflow Source: HP, HP Product Security Response Team PSRT Reported by: Kevin Backhouse of GitHub Security Lab VULNERABILITY SUMMARY The HP Linux Imaging and Printing HPLIP software may potentially be affected by memory buffer overflow. RESOLUTION HP has...

imagingtechnology.co.nz Cross Site Scripting vulnerability OBB-1371817

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

ricoh-imaging.co.kr Cross Site Scripting vulnerability OBB-1356438

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

NewStart CGSL MAIN 4.05 : python-imaging Vulnerability (NS-SA-2020-0045)

The remote NewStart CGSL host, running version MAIN 4.05, has python-imaging packages installed that are affected by a vulnerability: - libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow. CVE-2020-5312 Note that Nessus has not tested for this issue but has instead reli...

Information disclosure

An information disclosure vulnerability exists when the Windows Image Acquisition WIA Service improperly discloses contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an...

CVE-2020-1474: Undefined Security Weakness

An information disclosure vulnerability exists when the Windows Image Acquisition WIA Service improperly discloses contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an...

Windows Image Acquisition Service Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows Image Acquisition WIA Service improperly discloses contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an...

Windows Image Acquisition Service Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows Image Acquisition WIA Service improperly discloses contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an...

PT-2020-3683 · Microsoft · Windows Image Acquisition (Wia) Service +1

Name of the Vulnerable Software and Affected Versions: Windows Image Acquisition WIA Service affected versions not specified Description: An information disclosure issue exists due to the improper disclosure of the WIA Service's memory contents. This could allow an attacker to obtain information...

PT-2020-3670 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing an attacker to disclose protected information using a specially crafted application. An authenticated attacker could exploit th...