9.8

CVE-2020-25175

GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gehealthcare ≫ Optima Mr360 Firmware Version -
   Gehealthcare ≫ Optima Mr360 Version -
Gehealthcare ≫ Logiq 5 Bt03 Firmware Version -
   Gehealthcare ≫ Logiq 5 Bt03 Version -
Gehealthcare ≫ Logiq 7 Bt03 Firmware Version -
   Gehealthcare ≫ Logiq 7 Bt03 Version -
Gehealthcare ≫ Logiq 7 Bt04 Firmware Version -
   Gehealthcare ≫ Logiq 7 Bt04 Version -
Gehealthcare ≫ Logiq 7 Bt06 Firmware Version -
   Gehealthcare ≫ Logiq 7 Bt06 Version -
Gehealthcare ≫ Logiq 9 Bt02 Firmware Version -
   Gehealthcare ≫ Logiq 9 Bt02 Version -
Gehealthcare ≫ Logiq 9 Bt03 Firmware Version -
   Gehealthcare ≫ Logiq 9 Bt03 Version -
Gehealthcare ≫ Logiq 9 Bt04 Firmware Version -
   Gehealthcare ≫ Logiq 9 Bt04 Version -
Gehealthcare ≫ Logiq 9 Bt06 Firmware Version -
   Gehealthcare ≫ Logiq 9 Bt06 Version -
Gehealthcare ≫ Vivid I Bt06 Firmware Version -
   Gehealthcare ≫ Vivid I Bt06 Version -
Gehealthcare ≫ Vivid 7 Bt02 Firmware Version -
   Gehealthcare ≫ Vivid 7 Bt02 Version -
Gehealthcare ≫ Vivid 7 Bt06 Firmware Version -
   Gehealthcare ≫ Vivid 7 Bt06 Version -
Gehealthcare ≫ Echopac Bt06 Firmware Version -
   Gehealthcare ≫ Echopac Bt06 Version -
Gehealthcare ≫ Image Vault Firmware Version -
   Gehealthcare ≫ Image Vault Version -
Gehealthcare ≫ Innova 2000 Firmware Version -
   Gehealthcare ≫ Innova 2000 Version -
Gehealthcare ≫ Innova 3100 Firmware Version -
   Gehealthcare ≫ Innova 3100 Version -
Gehealthcare ≫ Innova 4100 Firmware Version -
   Gehealthcare ≫ Innova 4100 Version -
Gehealthcare ≫ Optima 320 Firmware Version -
   Gehealthcare ≫ Optima 320 Version -
Gehealthcare ≫ Optima Cl320 Firmware Version -
   Gehealthcare ≫ Optima Cl320 Version -
Gehealthcare ≫ Optima 3100 Firmware Version -
   Gehealthcare ≫ Optima 3100 Version -
Gehealthcare ≫ Brivo Xr118 Firmware Version -
   Gehealthcare ≫ Brivo Xr118 Version -
Gehealthcare ≫ Brivo Xr383 Firmware Version -
   Gehealthcare ≫ Brivo Xr383 Version -
Gehealthcare ≫ Brivo Xr515 Firmware Version -
   Gehealthcare ≫ Brivo Xr515 Version -
Gehealthcare ≫ Brivo Xr575 Firmware Version -
   Gehealthcare ≫ Brivo Xr575 Version -
Gehealthcare ≫ Amx 700 Firmware Version -
   Gehealthcare ≫ Amx 700 Version -
Gehealthcare ≫ Optima Xr640 Firmware Version -
   Gehealthcare ≫ Optima Xr640 Version -
Gehealthcare ≫ Optima Xr646 Firmware Version -
   Gehealthcare ≫ Optima Xr646 Version -
Gehealthcare ≫ Wdr1 Firmware Version -
   Gehealthcare ≫ Wdr1 Version -
Gehealthcare ≫ Seno 200d Firmware Version -
   Gehealthcare ≫ Seno 200d Version -
Gehealthcare ≫ Seno Ds Firmware Version -
   Gehealthcare ≫ Seno Ds Version -
Gehealthcare ≫ Brivo Ct385 Firmware Version -
   Gehealthcare ≫ Brivo Ct385 Version -
Gehealthcare ≫ Optima Ct520 Firmware Version -
   Gehealthcare ≫ Optima Ct520 Version -
Gehealthcare ≫ Optima Ct540 Firmware Version -
   Gehealthcare ≫ Optima Ct540 Version -
Gehealthcare ≫ Optima Ct660 Firmware Version -
   Gehealthcare ≫ Optima Ct660 Version -
Gehealthcare ≫ Optima Ct580 Firmware Version -
   Gehealthcare ≫ Optima Ct580 Version -
Gehealthcare ≫ Optima Ct670 Firmware Version -
   Gehealthcare ≫ Optima Ct670 Version -
Gehealthcare ≫ Optima Ct68 Firmware Version -
   Gehealthcare ≫ Optima Ct68 Version -
Gehealthcare ≫ Brivo Nm 615 Firmware Version -
   Gehealthcare ≫ Brivo Nm 615 Version -
Gehealthcare ≫ Infinia Firmware Version -
   Gehealthcare ≫ Infinia Version -
Gehealthcare ≫ Discovery Iq Firmware Version -
   Gehealthcare ≫ Discovery Iq Version -
Gehealthcare ≫ Ventri Firmware Version -
   Gehealthcare ≫ Ventri Version -
Gehealthcare ≫ Xeleris Firmware Version -
   Gehealthcare ≫ Xeleris Version -
Gehealthcare ≫ Petrace 800 Firmware Version -
   Gehealthcare ≫ Petrace 800 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.14% 0.623
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-522 Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

CWE-523 Unprotected Transport of Credentials

Login pages do not use adequate measures to protect the user name and password while they are in transit from the client to the server.

https://us-cert.cisa.gov/ics/advisories/icsma-20-343-01
Third Party Advisory
US Government Resource