Skip to content
Fencer Vulns
critical 9.8

CVE-2020-25179 json

GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.

published 2020-12-14 5 y ago modified 2026-06-17 4 mo ago also EUVD-2020-17870

cvss
9.8
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.5%
EPSS 1.5% chance of exploitation in 30 days, percentile 74%
public exploits
0
none known

Summary

GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSMA-20-343-01 updated cvss 9.8

GE Healthcare Imaging and Ultrasound Products

  • GE Healthcare 1.5T Brivo MR355 SV20.1, SV23.0 GE Healthcare 1.5T Signa Hdx HD 16, HD23 GE Healthcare 3.0T Signa Hdxt HD 16, HD23 GE Healthcare 3.0T Signa HDXx HD 16, HD23 GE Healthcare Alaris PC Unit GE Healthcare AMX 700
    +34 more products
    GE Healthcare AW >= 4.0, <= 4.6 GE Healthcare AWS >= 2.0, <= 3.0 GE Healthcare BrightSpeed Edge GE Healthcare BrightSpeed Edge Select GE Healthcare BrightSpeed Elite GE Healthcare BrightSpeed Elite Select GE Healthcare Brivio NM 615 GE Healthcare Brivo CT385 GE Healthcare Brivo XR118 GE Healthcare Brivo XR383 GE Healthcare Brivo XR515 GE Healthcare Brivo XR575 GE Healthcare Definium 5000 GE Healthcare Definium 6000 GE Healthcare Definium 8000 GE Healthcare Discovery CT590RT GE Healthcare Discovery CT750HD GE Healthcare Discovery IQ GE Healthcare Discovery MI MI DR GE Healthcare Discovery NM 630 GE Healthcare Discovery NM 750b GE Healthcare Discovery NM D530c GE Healthcare Discovery NM/CT 670 GE Healthcare Discovery NM/CT 850 GE Healthcare Discovery NM/CT 860 GE Healthcare Discovery NM/CT 870 GE Healthcare Discovery NM/CT D570c GE Healthcare Discovery NM830 GE Healthcare Discovery Xr650 GE Healthcare Discovery XR656 GE Healthcare Discovery XR656+ GE Healthcare EchoPAC (Turnkey) BT06 GE Healthcare Essential GE Healthcare GE Imaging and Ultrasound Products
    affected: vendor fix gehealthcare.com

66 more affected in the full advisory

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Exploit prediction

1.50% chance of exploitation in the next 30 days, higher than 74% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

  • n/a GE Healthcare Imaging and Ultrasound Products

Classification

Weakness
  • CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere
  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.