CVE-2020-25175

mediumpriority · track · 39EPSS 0.011 · 67 %ileEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

1.15% (67th) EPSS

CVSS 5 · medium

Is it mine?

331 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · cisa_csaf_ot

EPSS · scored 2026-10-27

GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixed1.5T Brivo MR355cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
Fixed1.5T Signa Hdxcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
Fixed3.0T Signa HDXxcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
Fixed3.0T Signa Hdxtcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedAMX 700cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedAWcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedAWScisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedAlaris PC Unitcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedBrightSpeed Edgecisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedBrightSpeed Edge Selectcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedBrightSpeed Elitecisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedBrightSpeed Elite Selectcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedBrivio NM 615cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedBrivo CT385cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedBrivo XR118cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedBrivo XR383cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedBrivo XR515cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedBrivo XR575cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedDefinium 5000cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedDefinium 6000cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedDefinium 8000cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedDiscovery CT590RTcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedDiscovery CT750HDcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedDiscovery IQcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedDiscovery MI MI DRcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedDiscovery NM 630cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedDiscovery NM 750bcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedDiscovery NM D530ccisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedDiscovery NM/CT 670cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedDiscovery NM/CT 850cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedDiscovery NM/CT 860cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedDiscovery NM/CT 870cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedDiscovery NM/CT D570ccisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedDiscovery NM830cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedDiscovery XR650cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedDiscovery XR656cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedDiscovery XR656+cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedEchoPAC (Turnkey)cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedEssentialcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedGE Imaging and Ultrasound Productscisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedImage Vault (Turnkey)cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedInfiniacisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedInnova 2000cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedInnova 2100-IQcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedInnova 212-IQcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedInnova 3100cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedInnova 3100-IQcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedInnova 313-IQcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedInnova 4100cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedInnova 4100-IQcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedInnova IGS 5x0cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedInnova IGS 6x0cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedInnova IGS 7x0cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedLOGIQ 5cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedLOGIQ 7cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedLOGIQ 9cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedLightSpeed Pro16cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedLightSpeed RT16cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedLightSpeed VCTcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedOptima 3100cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedOptima 320cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedOptima Advancecisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedOptima CL320cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedOptima CL320icisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedOptima CL323icisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedOptima CT520cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedOptima CT540cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedOptima CT580cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedOptima CT580RTcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedOptima CT580Wcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedOptima CT660cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedOptima CT670cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedOptima CT680 Expertcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedOptima CT680 Professionalcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedOptima CT680 Quantumcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedOptima IGS 320cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedOptima IGS 330cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedOptima MR360cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedOptima NM/CT640cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedOptima XR200amxcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedOptima XR220amxcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedOptima XR640cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedOptima XR646cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedPET Discovery IQcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedPET Discovery IQ upgradecisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedPETrace 800cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedPrecision 500Dcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedPrecision WDR1cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedRevolution ACTscisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedRevolution CTcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedRevolution Discover CTcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedRevolution EVOcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedRevolution Frontiercisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedRevolution Frontier EScisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedRevolution HACTcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedRevolution HDcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedSeno 200Dcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedSeno DScisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedSenographe Pristinacisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedSigna HDicisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedSigna VIBRANTcisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedVentricisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedVivid 7cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedVivid Icisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedVoluson 730cisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
FixedXeleriscisa_csaf_ot
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 5–9.8

v2.05mediumAV:N/AC:L/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USexploitability 10 · impact 2.9

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9

v3.09.8criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · CISA US

v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-522USprimaryCWE-523USCWE-523US

affected products (331)

Products and version ranges known to be affected.

1.5T Brivo MR355: SV20.1 | SV23.0all versionscisa_csaf_otUS
1.5T Signa Hdx: HD 16 | HD23all versionscisa_csaf_otUS
3.0T Signa HDXx: HD 16 | HD23all versionscisa_csaf_otUS
3.0T Signa Hdxt: HD 16 | HD23all versionscisa_csaf_otUS
AMX 700: *all versionscisa_csaf_otUS
AW: >= 4.0 | <= 4.6all versionscisa_csaf_otUS
AWS: >= 2.0 | <= 3.0all versionscisa_csaf_otUS
Alaris PC Unit: *all versionscisa_csaf_otUS
BrightSpeed Edge Select: *all versionscisa_csaf_otUS
BrightSpeed Edge: *all versionscisa_csaf_otUS
BrightSpeed Elite Select: *all versionscisa_csaf_otUS
BrightSpeed Elite: *all versionscisa_csaf_otUS
Brivio NM 615: *all versionscisa_csaf_otUS
Brivo CT385: *all versionscisa_csaf_otUS
Brivo XR118: *all versionscisa_csaf_otUS
Brivo XR383: *all versionscisa_csaf_otUS
Brivo XR515: *all versionscisa_csaf_otUS
Brivo XR575: *all versionscisa_csaf_otUS
Definium 5000: *all versionscisa_csaf_otUS
Definium 6000: *all versionscisa_csaf_otUS

showing 20 of 331

advisories (1)

Vendor and ecosystem advisories describing this.

ICSMA-20-343-01GE Healthcare Imaging and Ultrasound Products2020-12-08icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could occur if an attacker gains access to the healthcare delivery organization 's (HDO) network. If exploited, these vulnerabilities could allow an attacker to gain access to affected devices in a way that is comparable with GE (remote) service user privileges. A successful exploitation could expose sensitive data such as a limited set of patient health information (PHI) or could allow the attacker to run arbitrary code, which might impact the availability of the system and allow manipulation of PHI.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cisa_csaf_ot NVD CVE.org MITRE

published 2020-12-14modified 2026-06-17

related (1,721)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2021-40655US	high7.5OT critical	86.7% (100th)	KEV	2021-09-24
An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT. An attacker can obtain a user name and password by forging a post request to the / getcfg.php…
CVE-2021-30116US	critical9.8OT critical	85.7% (100th)	KEV	2021-07-09
Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page where the clients for the insta…
CVE-2021-22681US	critical9.8OT critical	63.6% (99th)	KEV	2021-03-03
Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell…
CVE-2020-29583US	critical9.8OT critical	90.2% (100th)	KEV	2020-12-22
Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The password for this account can be found in cleartext in the fi…
CVE-2017-9248US	critical9.8OT critical	75.1% (100th)	KEV	2017-07-03
Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionK…

+1716 more

references (6)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan