CVE-2020-25179 Information disclosure in GE Healthcare Imaging and Ultrasound Products
Attackers can intercept network traffic to expose specific credentials from GE Healthcare imaging and ultrasound devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-25179?
CVE-2020-25179 is a critical vulnerability in GE Healthcare Imaging and Ultrasound Products, published on 14 Dec 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.
Which versions are affected by CVE-2020-25179?
It affects 112 products.
Products include Gehealthcare 1.5t Brivo Mr355 Firmware, Gehealthcare 3.0t Signa Hd 16 Firmware, Gehealthcare 3.0t Signa Hd 23 Firmware, Gehealthcare 3.0t Signa Hdxt Firmware, Gehealthcare Amx 700 Firmware, Gehealthcare Brightspeed Edge Firmware and 106 more.
How do I fix CVE-2020-25179?
No fix has been published for CVE-2020-25179 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-25179 being exploited?
There is no known exploitation of CVE-2020-25179 in the wild and no public exploit code.
Other vulnerabilities in GE Healthcare Imaging and Ultrasound Products
Sources
Also known as GHSA-c5fc-m7pj-4vv5.