Description:

GE has released security alert for multiple vulnerabilities in the following products:

• MR
  • 3.0T Signa HDxt / 3.0T Signa HDx, versions HD 16, HD23
  • 1.5T Brivo MR355 / Optima MR360, versions SV20.1, SV23.0
  • 1.5T Signa HDx / 1.5T Signa HDx, Signa HDi / Signa VIBRANT, versions HD16, HD23
• Ultrasound, General Imaging
  • LOGIQ 5 [BT03], LOGIQ 7 (BT03, BT04, BT06], LOGIQ 9 [BT02, BT03, BT04, BT06]
• Ultrasound, Cardiovascular
  • Vivid I [BT06], Vivid 7 {BT02-BT06], EchoPAC (Turnkey) [BT06], Image Vault (Turnkey)[4.3]
• Ultrasound, Women’s Health
  • Voluson 730 [BT05, BT08]
• Advanced Visualization
  • AW 4.0 to AW 4.6, AWS2.0 to AW3.0
• Interventional
  • Innova 2000, 3100, 4100, 2100-IQ, 3100-IQ, 4100-IQ, 212-IQ, 313-IQ
  • Optima 320, CL320i, CL323i, CL320, 3100
  • Optima IGS 320, 330; Innova IGS 5x0, 6x0, 7x0
• X-Ray
  • Brivo XR118, XR383, XR515, XR575; Definium 5000, 6000, 8000, AMX 700; Discovery XR650, XR656, XR656+; Optima XR640, XR646, XR220amx, XR200amx; Precision 500D, WDR1
• Mammography
  • Seno 200D, DS, Essential; Senographe Pristina
• Computed Tomography
  • BrightSpeed Elite, Elite Select, Edge, Edge Select
  • Brivo CT385
  • Discovery CT590RT, CT750HD
  • LightSpeed VCT, Pro16, RT16
  • Optima Advance, CT520, CT540, CT660, CT580, CT580RT, CT580W, CT670, CT680 Quantum, Expert & Professional
  • Revolution EVO,HD,ACT, ACTs, CT, Discovery CT, Frontier, Frontier ES
• Nuclear Medicine, PET/CT
  • Brivo NM 615
  • Discovery NM 630, NM 750b, NM D530c, NM/CT D570c, NM/CT 670
  • Infinia
  • Discovery NM830, NM/CT 860, NM/CT850, NM/CT 870, MI MI DR, IQ
  • Optima NM/CT 640
  • Ventri
  • Xeleris
  • PET Discovery IQ, IQ upgrade
  • PETrace 800

Threats:

Attacker could exploit these vulnerabilities by doing the following:

• Unauthorized modification
• Unauthorized disclosure of information

Best practice and Recommendations:

The CERT team encourages users to apply the best practices released by GE in the link bellow:

• https://www.gehealthcare.com/en-US/security