CVE-2020-25175

mediumPriorität · verfolgen · 39EPSS 0.011 · 67. PerzentilEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

1.15% (67th) EPSS

CVSS 5 · medium

Is it mine?

331 products

Prüfe deine Angriffsfläche

Who says so?

3 sources

cnnvd · enisa_euvd · cisa_csaf_ot

EPSS · bewertet 2026-10-27

GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

Behoben1.5T Brivo MR355cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
Behoben1.5T Signa Hdxcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
Behoben3.0T Signa HDXxcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
Behoben3.0T Signa Hdxtcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenAMX 700cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenAWcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenAWScisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenAlaris PC Unitcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenBrightSpeed Edgecisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenBrightSpeed Edge Selectcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenBrightSpeed Elitecisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenBrightSpeed Elite Selectcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenBrivio NM 615cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenBrivo CT385cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenBrivo XR118cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenBrivo XR383cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenBrivo XR515cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenBrivo XR575cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenDefinium 5000cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenDefinium 6000cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenDefinium 8000cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenDiscovery CT590RTcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenDiscovery CT750HDcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenDiscovery IQcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenDiscovery MI MI DRcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenDiscovery NM 630cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenDiscovery NM 750bcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenDiscovery NM D530ccisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenDiscovery NM/CT 670cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenDiscovery NM/CT 850cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenDiscovery NM/CT 860cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenDiscovery NM/CT 870cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenDiscovery NM/CT D570ccisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenDiscovery NM830cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenDiscovery XR650cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenDiscovery XR656cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenDiscovery XR656+cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenEchoPAC (Turnkey)cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenEssentialcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenGE Imaging and Ultrasound Productscisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenImage Vault (Turnkey)cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenInfiniacisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenInnova 2000cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenInnova 2100-IQcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenInnova 212-IQcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenInnova 3100cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenInnova 3100-IQcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenInnova 313-IQcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenInnova 4100cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenInnova 4100-IQcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenInnova IGS 5x0cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenInnova IGS 6x0cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenInnova IGS 7x0cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenLOGIQ 5cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenLOGIQ 7cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenLOGIQ 9cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenLightSpeed Pro16cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenLightSpeed RT16cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenLightSpeed VCTcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenOptima 3100cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenOptima 320cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenOptima Advancecisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenOptima CL320cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenOptima CL320icisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenOptima CL323icisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenOptima CT520cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenOptima CT540cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenOptima CT580cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenOptima CT580RTcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenOptima CT580Wcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenOptima CT660cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenOptima CT670cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenOptima CT680 Expertcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenOptima CT680 Professionalcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenOptima CT680 Quantumcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenOptima IGS 320cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenOptima IGS 330cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenOptima MR360cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenOptima NM/CT640cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenOptima XR200amxcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenOptima XR220amxcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenOptima XR640cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenOptima XR646cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenPET Discovery IQcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenPET Discovery IQ upgradecisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenPETrace 800cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenPrecision 500Dcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenPrecision WDR1cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenRevolution ACTscisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenRevolution CTcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenRevolution Discover CTcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenRevolution EVOcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenRevolution Frontiercisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenRevolution Frontier EScisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenRevolution HACTcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenRevolution HDcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenSeno 200Dcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenSeno DScisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenSenographe Pristinacisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenSigna HDicisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenSigna VIBRANTcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenVentricisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenVivid 7cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenVivid Icisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenVoluson 730cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
BehobenXeleriscisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–critical · 5–9.8

v2.05mediumAV:N/AC:L/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 2.9

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 5.9

v3.09.8criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · CISA US

v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-522USprimärCWE-523USCWE-523US

betroffene Produkte (331)

Betroffene Produkte und Versionsbereiche.

1.5T Brivo MR355: SV20.1 | SV23.0alle Versionencisa_csaf_otUS
1.5T Signa Hdx: HD 16 | HD23alle Versionencisa_csaf_otUS
3.0T Signa HDXx: HD 16 | HD23alle Versionencisa_csaf_otUS
3.0T Signa Hdxt: HD 16 | HD23alle Versionencisa_csaf_otUS
AMX 700: *alle Versionencisa_csaf_otUS
AW: >= 4.0 | <= 4.6alle Versionencisa_csaf_otUS
AWS: >= 2.0 | <= 3.0alle Versionencisa_csaf_otUS
Alaris PC Unit: *alle Versionencisa_csaf_otUS
BrightSpeed Edge Select: *alle Versionencisa_csaf_otUS
BrightSpeed Edge: *alle Versionencisa_csaf_otUS
BrightSpeed Elite Select: *alle Versionencisa_csaf_otUS
BrightSpeed Elite: *alle Versionencisa_csaf_otUS
Brivio NM 615: *alle Versionencisa_csaf_otUS
Brivo CT385: *alle Versionencisa_csaf_otUS
Brivo XR118: *alle Versionencisa_csaf_otUS
Brivo XR383: *alle Versionencisa_csaf_otUS
Brivo XR515: *alle Versionencisa_csaf_otUS
Brivo XR575: *alle Versionencisa_csaf_otUS
Definium 5000: *alle Versionencisa_csaf_otUS
Definium 6000: *alle Versionencisa_csaf_otUS

20 von 331 angezeigt

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

ICSMA-20-343-01GE Healthcare Imaging and Ultrasound Products2020-12-08icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could occur if an attacker gains access to the healthcare delivery organization 's (HDO) network. If exploited, these vulnerabilities could allow an attacker to gain access to affected devices in a way that is comparable with GE (remote) service user privileges. A successful exploitation could expose sensitive data such as a limited set of patient health information (PHI) or could allow the attacker to run arbitrary code, which might impact the availability of the system and allow manipulation of PHI.

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd cisa_csaf_ot NVD CVE.org MITRE

veröffentlicht 2020-12-14geändert 2026-06-17

verwandt (1,721)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2021-40655US	high7.5OT kritisch	86.7% (100th)	KEV	2021-09-24
An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT. An attacker can obtain a user name and password by forging a post request to the / getcfg.php…
CVE-2021-30116US	critical9.8OT kritisch	85.7% (100th)	KEV	2021-07-09
Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page where the clients for the insta…
CVE-2021-22681US	critical9.8OT kritisch	63.6% (99th)	KEV	2021-03-03
Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell…
CVE-2020-29583US	critical9.8OT kritisch	90.2% (100th)	KEV	2020-12-22
Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The password for this account can be found in cleartext in the fi…
CVE-2017-9248US	critical9.8OT kritisch	75.1% (100th)	KEV	2017-07-03
Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionK…

+1716 weitere

Referenzen (6)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan