9.8

CVE-2020-25179

GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gehealthcare ≫ Image Vault Firmware Version-
   Gehealthcare ≫ Image Vault Version-
Gehealthcare ≫ Innova 2000 Firmware Version-
   Gehealthcare ≫ Innova 2000 Version-
Gehealthcare ≫ Innova 3100 Firmware Version-
   Gehealthcare ≫ Innova 3100 Version-
Gehealthcare ≫ Innova 4100 Firmware Version-
   Gehealthcare ≫ Innova 4100 Version-
Gehealthcare ≫ Optima 320 Firmware Version-
   Gehealthcare ≫ Optima 320 Version-
Gehealthcare ≫ Optima 3100 Firmware Version-
   Gehealthcare ≫ Optima 3100 Version-
Gehealthcare ≫ Brivo Xr118 Firmware Version-
   Gehealthcare ≫ Brivo Xr118 Version-
Gehealthcare ≫ Brivo Xr383 Firmware Version-
   Gehealthcare ≫ Brivo Xr383 Version-
Gehealthcare ≫ Brivo Xr515 Firmware Version-
   Gehealthcare ≫ Brivo Xr515 Version-
Gehealthcare ≫ Brivo Xr575 Firmware Version-
   Gehealthcare ≫ Brivo Xr575 Version-
Gehealthcare ≫ Amx 700 Firmware Version-
   Gehealthcare ≫ Amx 700 Version-
Gehealthcare ≫ Wdr1 Firmware Version-
   Gehealthcare ≫ Wdr1 Version-
Gehealthcare ≫ Seno 200d Firmware Version-
   Gehealthcare ≫ Seno 200d Version-
Gehealthcare ≫ Seno Ds Firmware Version-
   Gehealthcare ≫ Seno Ds Version-
Gehealthcare ≫ Brivo Ct385 Firmware Version-
   Gehealthcare ≫ Brivo Ct385 Version-
Gehealthcare ≫ Optima Ct68 Firmware Version-
   Gehealthcare ≫ Optima Ct68 Version-
Gehealthcare ≫ Infinia Firmware Version-
   Gehealthcare ≫ Infinia Version-
Gehealthcare ≫ Ventri Firmware Version-
   Gehealthcare ≫ Ventri Version-
Gehealthcare ≫ Xeleris Firmware Version-
   Gehealthcare ≫ Xeleris Version-
Gehealthcare ≫ Petrace 800 Firmware Version-
   Gehealthcare ≫ Petrace 800 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.22% 0.447
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere

The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

https://us-cert.cisa.gov/ics/advisories/icsma-20-343-01
Third Party Advisory
US Government Resource