9.8

CVE-2020-25175

GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gehealthcare ≫ Image Vault Firmware Version-
   Gehealthcare ≫ Image Vault Version-
Gehealthcare ≫ Innova 2000 Firmware Version-
   Gehealthcare ≫ Innova 2000 Version-
Gehealthcare ≫ Innova 3100 Firmware Version-
   Gehealthcare ≫ Innova 3100 Version-
Gehealthcare ≫ Innova 4100 Firmware Version-
   Gehealthcare ≫ Innova 4100 Version-
Gehealthcare ≫ Optima 320 Firmware Version-
   Gehealthcare ≫ Optima 320 Version-
Gehealthcare ≫ Optima 3100 Firmware Version-
   Gehealthcare ≫ Optima 3100 Version-
Gehealthcare ≫ Brivo Xr118 Firmware Version-
   Gehealthcare ≫ Brivo Xr118 Version-
Gehealthcare ≫ Brivo Xr383 Firmware Version-
   Gehealthcare ≫ Brivo Xr383 Version-
Gehealthcare ≫ Brivo Xr515 Firmware Version-
   Gehealthcare ≫ Brivo Xr515 Version-
Gehealthcare ≫ Brivo Xr575 Firmware Version-
   Gehealthcare ≫ Brivo Xr575 Version-
Gehealthcare ≫ Amx 700 Firmware Version-
   Gehealthcare ≫ Amx 700 Version-
Gehealthcare ≫ Wdr1 Firmware Version-
   Gehealthcare ≫ Wdr1 Version-
Gehealthcare ≫ Seno 200d Firmware Version-
   Gehealthcare ≫ Seno 200d Version-
Gehealthcare ≫ Seno Ds Firmware Version-
   Gehealthcare ≫ Seno Ds Version-
Gehealthcare ≫ Brivo Ct385 Firmware Version-
   Gehealthcare ≫ Brivo Ct385 Version-
Gehealthcare ≫ Optima Ct68 Firmware Version-
   Gehealthcare ≫ Optima Ct68 Version-
Gehealthcare ≫ Infinia Firmware Version-
   Gehealthcare ≫ Infinia Version-
Gehealthcare ≫ Ventri Firmware Version-
   Gehealthcare ≫ Ventri Version-
Gehealthcare ≫ Xeleris Firmware Version-
   Gehealthcare ≫ Xeleris Version-
Gehealthcare ≫ Petrace 800 Firmware Version-
   Gehealthcare ≫ Petrace 800 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.24% 0.435
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-522 Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

CWE-523 Unprotected Transport of Credentials

Login pages do not use adequate measures to protect the user name and password while they are in transit from the client to the server.

https://us-cert.cisa.gov/ics/advisories/icsma-20-343-01
Third Party Advisory
US Government Resource