LIVE FEED
A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident. A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident.
Saturday, October 31, 2026 Issue #499  ·  Est. 2025
Independent brief for device makers
Manufacturers // GE HealthCare

GE HealthCare

GE HealthCare in MedDevice Cyber coverage: 8 stories, 28 products named, 6 CVEs, and the company's own disclosures.

Public disclosure program
Follow GE HealthCareClaim this page
Stories
8
Products named
28
Product CVEs
6
Responses on record
0
Latest story
May 11, 2026

Coverage

8 stories
01
Vulnerability

A security flaw in the server behind GE Revolution CT scanners

GE HealthCare recalled certain Revolution CT systems over a vulnerability in the AW Server deployed via its Edison Health Link subscription. About 200 systems worldwide, no breaches reported.

Radiology BusinessMay 112 min read
02
Vulnerability

Login credentials exposed on the workstation in a GE imaging viewer

GE HealthCare issued an urgent correction for Centricity Universal Viewer after a flaw exposed user login credentials on the local client. An attacker with physical access could harvest them. FDA logged it as a Class 2 recall.

FDAMar 162 min read
03
Vulnerability

A legacy cardiology system, end-of-service since 2014, recalled for security

GE HealthCare recalled legacy MUSE cardiology systems after finding an outside party could view and manipulate stored patient data. About 4,200 systems, some out of service support since 2014.

Cardiovascular BusinessJun 103 min read
04
Vulnerability

GE Healthcare imaging and ultrasound systems expose default service credentials

CISA advisory ICSMA-20-343-01 covers CVE-2020-25179 and CVE-2020-25175 (both CVSS 9.8) in dozens of GE Healthcare CT, MR, X-ray, nuclear medicine, interventional and ultrasound systems: exposed default credentials and credentials sent unprotected over the network. GE is changing default passwords and firewall settings where possible.

CISADec 83 min read
05
Vulnerability

GE Healthcare ultrasound systems let a local user escape Kiosk Mode to the operating system

CISA advisory ICSMA-20-049-02 covers CVE-2020-6977 (CWE-693, CVSS v3.1 8.4), a Kiosk Mode escape in GE Healthcare LOGIQ, Vivid, Voluson, Venue, Versana Essential and Invenia ABUS ultrasound systems. GE recommends physical access restrictions and the system lock password; no patch is listed.

CISAFeb 183 min read
06
Vulnerability

GE Aestiva and Aespire anesthesia devices can have alarms silenced through unsecured terminal servers

CISA advisory ICSMA-19-190-01 covers CVE-2019-10966 (CVSS v3 5.3) in GE Healthcare Aestiva, Aespire, Aisys CS2 and Carestation anesthesia devices whose serial ports are bridged to TCP/IP through an unsecured terminal server. GE recommends secure terminal servers and network segmentation.

CISAJul 92 min read
07
Vulnerability

Silex modules in GE MobileLink allow unauthenticated setting changes and command injection

CISA advisory ICSMA-18-128-01 covers missing authentication (CVE-2018-6020, CVSS v3 6.5) and OS command injection (CVE-2018-6021, CVSS v3 7.4) in Silex Technology SX-500 and SD-320AN modules integrated into GE Healthcare MobileLink. Firmware 1.14 fixes the GEH-SD-320AN; the SX-500 needs its update account enabled.

CISAMay 83 min read
08
Vulnerability

GE Healthcare imaging and PACS products ship with default or hard-coded passwords

CISA advisory ICSMA-18-037-02 lists 21 improper authentication CVEs, each scored CVSS v3 9.8, for default or hard-coded credentials across GE Healthcare imaging, nuclear medicine and PACS products. GE offers updates on request for all but the Optima 680, Revolution XQ/i and THUNIS-800+.

CISAFeb 64 min read

Products in our coverage

  • AW Server CT imaging server software
  • Centricity Universal Viewer 7.0 through 7.0 Sp2.0.1 medical image viewing software
  • MUSE Cardiology Information System Muse 5 cardiology information system
  • CT scanners LightSpeed Pro16, LightSpeed RT16, LightSpeed VCT, BrightSpeed Edge, BrightSpeed Edge Select, BrightSpeed Elite, BrightSpeed Elite Select, Discovery CT590RT, Discovery CT750HD, Brivo CT385, Optima 3100, all versions computed tomography scanner
  • MR systems 1.5T Brivo MR355 SV20.1, SV23.0; 1.5T Signa Hdx HD 16, HD23; 3.0T Signa HDXx HD 16, HD23; 3.0T Signa Hdxt HD 16, HD23 magnetic resonance imaging system
  • X-ray systems Definium 5000, 6000, 8000; Discovery XR656, XR656+, Xr650; Brivo XR118, XR383, XR515, XR575; AMX 700, all versions radiography system
  • Nuclear medicine systems Discovery NM 630, NM 750b, NM D530c, NM830, NM/CT 670, 850, 860, 870, D570c; Discovery IQ; Discovery MI DR; Infinia, all versions nuclear medicine camera
  • Innova Innova 2000, 2100-IQ, 212-IQ, 3100, 3100-IQ, 313-IQ, 4100, 4100-IQ, IGS 5x0, IGS 6x0, IGS 7x0, all versions interventional imaging system
  • Advantage Workstation AW 4.0 to 4.6, AWS 2.0 to 3.0 imaging review workstation
  • LOGIQ LOGIQ 5 BT03; LOGIQ 7 BT03, BT04, BT06; LOGIQ 9 BT02, BT03, BT04, BT06 ultrasound system
  • EchoPAC and Image Vault (Turnkey) EchoPAC BT06, Image Vault 4.3 ultrasound review software
  • Vivid All versions, not including EchoPAC cardiovascular ultrasound system
  • Voluson All versions, not including ImageVault women's health ultrasound system
  • Venue All versions, not including Venue 40 R1-3 and Venue 50 R4-5 point of care ultrasound system
  • Versana Essential All versions ultrasound system
  • Invenia ABUS Scan station All versions, not including VScan product line automated breast ultrasound scan station
  • Aestiva 7100, 7900 MRI anesthesia delivery system
  • Aespire 7100, 7900, 100, Protiva Carestation View anesthesia delivery system
  • Aisys CS2 Avance, Amingo, Avance CS2 anesthesia delivery system
  • Carestation 620, 650, 650c anesthesia delivery system
  • Optima CT Optima 520, 540, 640, 680, all versions computed tomography scanner
  • Discovery NM530c below 1.003, NM750b below 2.003, VH, XR656, XR656 Plus nuclear medicine and X-ray imaging system
  • Millennium MG, NC, MyoSIGHT, VG, all versions nuclear medicine imaging system
  • Centricity PACS RA1000, Server, PACS-IW, all versions picture archiving and communication system
  • Xeleris 1.0, 1.1, 2.1, 3.0, 3.1 nuclear medicine processing workstation
  • Infinia Infinia, Infinia with Hawkeye 4, all versions nuclear medicine imaging system
  • Optima MR360 all versions magnetic resonance imaging system
  • GEMNet License server (EchoServer) all versions imaging license server

Products and threat intel

139

GE HealthCare products with the device attributes their own public documentation states, and the advisories in our coverage that share those attributes.

ProductDevice typeAttributesMatched advisories
Vscan AirSystem, Imaging, Pulsed Doppler, Ultrasonic4653
Universal Viewer1817
LOGIQ eSystem, Imaging, Pulsed Doppler, Ultrasonic3416
ViewPoint 6System, Image Processing, Radiological2012
Definium Pace SelectSystem, X-Ray, Stationary1311
Versana ActiveSystem, Imaging, Pulsed Doppler, Ultrasonic3110
Versana PremierSystem, Imaging, Pulsed Doppler, Ultrasonic3310
BreViewSystem, Image Processing, Radiological119
EchoPAC Software Only / EchoPAC Plug-inAutomated Radiological Image Processing Software209
MR Contour DLRadiological Image Processing Software For Radiation Therapy89
Portrait Central Viewer Application (Portrait CV A01)Monitor, Physiological, Patient (Without Arrhythmia Detection Or Alarms)188
Vivid S60N, Vivid S70NSystem, Imaging, Pulsed Doppler, Ultrasonic247
Venue GoSystem, Imaging, Pulsed Doppler, Ultrasonic256
Vivid iqSystem, Imaging, Pulsed Doppler, Ultrasonic216
CARESCAPE ONE and CARESCAPE DOCK F0Monitor, Physiological, Patient(With Arrhythmia Detection Or Alarms)115
CARESCAPE ONE and CARESCAPE DOCK FOMonitor, Physiological, Patient(With Arrhythmia Detection Or Alarms)75
LOGIQ E10s, LOGIQ FortisSystem, Imaging, Pulsed Doppler, Ultrasonic145
Mac-Lab Recording Systems AltiXComputer, Diagnostic, Programmable145
Monitor B125, Monitor B105Monitor, Physiological, Patient(With Arrhythmia Detection Or Alarms)125
Venue FitSystem, Imaging, Pulsed Doppler, Ultrasonic235
Automated Aortic Stenosis SoftwareComputer-Assisted Diagnostic Software For Lesions Suspicious For Cancer84
Carescape B650Monitor, Physiological, Patient(With Arrhythmia Detection Or Alarms)134
Deep Learning Image ReconstructionSystem, X-Ray, Tomography, Computed94
Spine Auto ViewsSystem, X-Ray, Tomography, Computed104
CARESCAPE B450, E-musbMonitor, Physiological, Patient(With Arrhythmia Detection Or Alarms)163
EchoPAC Software Only, EchoPAC Plug-inAutomated Radiological Image Processing Software203
Spectral Bone MarrowSystem, X-Ray, Tomography, Computed93
Carescape B850Monitor, Physiological, Patient(With Arrhythmia Detection Or Alarms)92
Carescape Canvas 1000; Carescape Canvas Smart DisplayMonitor, Physiological, Patient(With Arrhythmia Detection Or Alarms)142
MAC 7 Resting ECG Analysis SystemElectrocardiograph182
Portrait Mobile Monitoring Solution consists of: • Portrait CentralMonitor, Physiological, Patient (Without Arrhythmia Detection Or Alarms)172
CARESCAPE B650, E-musbMonitor, Physiological, Patient(With Arrhythmia Detection Or Alarms)171
CASE V7.0 Cardiac Testing System and CardioSoft V7.0 Cardiac TestingComputer, Diagnostic, Programmable101
Clarify DLSystem, Image Processing, Radiological41
FlightPlan for EmbolizationSystem, Image Processing, Radiological111
FlightPlan for LiverSystem, Image Processing, Radiological101
LOGIQ FortisSystem, Imaging, Pulsed Doppler, Ultrasonic131
MaxFOV 2System, X-Ray, Tomography, Computed81
Novii+ Wireless Patch SystemSystem, Monitoring, Perinatal81
OEC 3DImage-Intensified Fluoroscopic X-Ray System, Mobile111
VenueSystem, Imaging, Pulsed Doppler, Ultrasonic241
Versana EssentialSystem, Imaging, Pulsed Doppler, Ultrasonic321
3DXRInterventional Fluoroscopic X-Ray System30
AIR Recon DLSystem, Nuclear Magnetic Resonance Imaging50
AuroraSystem, Tomography, Computed, Emission50
Auto SegmentationRadiological Image Processing Software For Radiation Therapy100
CardIQ FlowSystem, Tomography, Computed, Emission50
CardIQ SuiteSystem, X-Ray, Tomography, Computed100
Carescape B450Monitor, Physiological, Patient(With Arrhythmia Detection Or Alarms)130
Carescape B850, E-musbMonitor, Physiological, Patient(With Arrhythmia Detection Or Alarms)180
CARESCAPE Canvas 1000Monitor, Physiological, Patient(With Arrhythmia Detection Or Alarms)70
Carescape ONEMonitor, Physiological, Patient(With Arrhythmia Detection Or Alarms)140
CARESCAPE Respiratory Modules, E-sCO, E-sCOV, E20
ClariPulmoSystem, Image Processing, Radiological50
Critical Care Suite with Enteric Tube Positioning AI AlgorithmAutomated Radiological Image Processing Software30
Critical Care Suite with Pneumothorax Detection AI AlgorithmRadiological Computer Assisted Detection/Diagnosis Software For Fracture70
Deep Learning Image ReconstructionSystem, X-Ray, Tomography, Computed60
Deep Learning Image Reconstruction for Gemstone Spectral ImagingSystem, X-Ray, Tomography, Computed70
DynamicIQSystem, Tomography, Computed, Emission50
E-eegx, N-eegxNon-Normalizing Quantitative Electroencephalograph Software30
ECG-less CardiacSystem, X-Ray, Tomography, Computed30
EK12 V2 AlgorithmMonitor, Physiological, Patient(With Arrhythmia Detection Or Alarms)60
Extron 3;EXTRON 6Interventional Fluoroscopic X-Ray System160
FastStroke, CT Perfusion 4DSystem, X-Ray, Tomography, Computed90
Giraffe OmniBed Carestation (CS1); Giraffe Incubator CarestationIncubator, Neonatal70
GraffitiComputer, Diagnostic, Programmable140
Hepatic VCARSystem, X-Ray, Tomography, Computed130
Liver SuiteSystem, X-Ray, Tomography, Computed100
Logiq E10System, Imaging, Pulsed Doppler, Ultrasonic120
Logiq E1040
LOGIQ E10sSystem, Imaging, Pulsed Doppler, Ultrasonic160
LOGIQ FocusSystem, Imaging, Pulsed Doppler, Ultrasonic90
Logiq P10, Logiq P9, Logiq P8System, Imaging, Pulsed Doppler, Ultrasonic220
Logiq P10, Logiq P9, Logiq P8System, Imaging, Pulsed Doppler, Ultrasonic150
LOGIQ TotusSystem, Imaging, Pulsed Doppler, Ultrasonic130
LOGIQ TotusSystem, Imaging, Pulsed Doppler, Ultrasonic110
LOGIQ Vita; LOGIQ Vita Pro; LOGIQ Vita Express; LOGIQ Vita Plus;System, Imaging, Pulsed Doppler, Ultrasonic40
Lunar AstraDensitometer, Bone70
MAC 5 A4/ MAC 5 A5/ MAC 5 Lite Resting ECG Analysis SystemElectrocardiograph170
Mac-Lab (AltiX AI.i)Computer, Diagnostic, Programmable130
Monitor B105MMonitor, Physiological, Patient(With Arrhythmia Detection Or Alarms)120
MyoSPECT10
OEC One ASDImage-Intensified Fluoroscopic X-Ray System, Mobile50
OEC One CFDImage-Intensified Fluoroscopic X-Ray System, Mobile50
Omni LegendSystem, Tomography, Computed, Emission60
Panda iRes Warmer, Giraffe WarmerWarmer, Infant Radiant40
PET Vcar60
Portrait VSMMonitor, Physiological, Patient (Without Arrhythmia Detection Or Alarms)50
Precision DLSystem, Tomography, Computed, Emission20
Pristina Serena BrightFull Field Digital, System, X-Ray, Mammographic30
PROViewSystem, Image Processing, Radiological60
Revolution ApexSystem, X-Ray, Tomography, Computed60
Revolution AscendSystem, X-Ray, Tomography, Computed40
Revolution Ascend SlidingSystem, X-Ray, Tomography, Computed60
Revolution VibeSystem, X-Ray, Tomography, Computed30
SenoBright HD40
Senographe Pristina [Design change: New version of eContrast]60
Signa 7.0T50
SIGNA ArchitectSystem, Nuclear Magnetic Resonance Imaging20
SIGNA ArtistSystem, Nuclear Magnetic Resonance Imaging50
SIGNA Artist EvoSystem, Nuclear Magnetic Resonance Imaging20
SIGNA BoltSystem, Nuclear Magnetic Resonance Imaging40
SIGNA ChampionSystem, Nuclear Magnetic Resonance Imaging60
Signa Pet/mrTomographic Imager Combining Emission Computed Tomography With Nuclear Magnetic Resonance60
SIGNA PremierSystem, Nuclear Magnetic Resonance Imaging30
SIGNA PrimeSystem, Nuclear Magnetic Resonance Imaging40
SIGNA Prime EliteSystem, Nuclear Magnetic Resonance Imaging30
SIGNA SprintSystem, Nuclear Magnetic Resonance Imaging50
SIGNA Sprint SelectSystem, Nuclear Magnetic Resonance Imaging60
Sonic DLSystem, Nuclear Magnetic Resonance Imaging20
StarGuideSystem, Tomography, Computed, Emission30
True Definition DLSystem, X-Ray, Tomography, Computed50
True Enhance DLSystem, X-Ray, Tomography, Computed50
Venue SprintSystem, Imaging, Pulsed Doppler, Ultrasonic180
Venue; Venue Go; Venue Fit; Venue SprintSystem, Imaging, Pulsed Doppler, Ultrasonic140
Versana BalanceSystem, Imaging, Pulsed Doppler, Ultrasonic250
Versana Premier; Versana Premier Lotus; LOGIQ FSystem, Imaging, Pulsed Doppler, Ultrasonic150
VersaViewerSystem, Image Processing, Radiological60
VesselIQ XpressSystem, X-Ray, Tomography, Computed110
ViewSystem, Image Processing, Radiological100
ViewPoint 6System, Image Processing, Radiological180
Vision 2, EVARVision, TrackVision 2, HeartVision 2System, Image Processing, Radiological50
Vivid E80, Vivid E90, Vivid E95System, Imaging, Pulsed Doppler, Ultrasonic230
Vivid Explorer/Vivid Advanced/Vivid FocusSystem, Imaging, Pulsed Doppler, Ultrasonic50
Vivid iqSystem, Imaging, Pulsed Doppler, Ultrasonic210
Vivid PioneerSystem, Imaging, Pulsed Doppler, Ultrasonic210
Vivid T8, Vivid T9System, Imaging, Pulsed Doppler, Ultrasonic210
Vivid T8, Vivid T9System, Imaging, Pulsed Doppler, Ultrasonic220
Vivid T9/Vivid T8System, Imaging, Pulsed Doppler, Ultrasonic250
Voluson E10System, Imaging, Pulsed Doppler, Ultrasonic100
Voluson Expert 18; Voluson Expert 20; Voluson Expert 22System, Imaging, Pulsed Doppler, Ultrasonic180
Voluson Expert 22, Voluson Expert 20, Voluson Expert 18System, Imaging, Pulsed Doppler, Ultrasonic150
Voluson P6, Voluson P8System, Imaging, Pulsed Doppler, Ultrasonic80
Voluson Performance 16; Voluson Performance 18System, Imaging, Pulsed Doppler, Ultrasonic160
Voluson S6, Voluson S8, Voluson S8t, Voluson S10, Voluson S10 ExpertSystem, Imaging, Pulsed Doppler, Ultrasonic110
Voluson Signature 20, Voluson Signature 18System, Imaging, Pulsed Doppler, Ultrasonic130
Voluson SWIFT; Voluson SWIFT+System, Imaging, Pulsed Doppler, Ultrasonic170
Xeleris V Processing and Review SystemSystem, Image Processing, Radiological60
Xeleris V Processing and Review SystemsSystem, Image Processing, Radiological80

CVEs in coverage of GE HealthCare products

CVE-2001-1594 CVE-2017-14008 CVE-2019-10966 CVE-2020-25175 CVE-2020-25179 CVE-2020-6977
← All manufacturers