Skip to content
Fencer Intel
critical 9.8

CVE-2020-25175 json

GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.

published 5y ago modified 4mo ago also EUVD-2020-17866

cvss
9.8
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.2%
EPSS 1.2% chance of exploitation in 30 days, percentile 67%
public exploits
0
none known

Summary

GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.

Is CVE-2020-25175 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSMA-20-343-01 updated cvss 9.8

GE Healthcare Imaging and Ultrasound Products

  • GE Healthcare 1.5T Brivo MR355 SV20.1, SV23.0 GE Healthcare 1.5T Signa Hdx HD 16, HD23 GE Healthcare 3.0T Signa Hdxt HD 16, HD23 GE Healthcare 3.0T Signa HDXx HD 16, HD23 GE Healthcare Alaris PC Unit GE Healthcare AMX 700
    +34 more products
    GE Healthcare AW >= 4.0, <= 4.6 GE Healthcare AWS >= 2.0, <= 3.0 GE Healthcare BrightSpeed Edge GE Healthcare BrightSpeed Edge Select GE Healthcare BrightSpeed Elite GE Healthcare BrightSpeed Elite Select GE Healthcare Brivio NM 615 GE Healthcare Brivo CT385 GE Healthcare Brivo XR118 GE Healthcare Brivo XR383 GE Healthcare Brivo XR515 GE Healthcare Brivo XR575 GE Healthcare Definium 5000 GE Healthcare Definium 6000 GE Healthcare Definium 8000 GE Healthcare Discovery CT590RT GE Healthcare Discovery CT750HD GE Healthcare Discovery IQ GE Healthcare Discovery MI MI DR GE Healthcare Discovery NM 630 GE Healthcare Discovery NM 750b GE Healthcare Discovery NM D530c GE Healthcare Discovery NM/CT 670 GE Healthcare Discovery NM/CT 850 GE Healthcare Discovery NM/CT 860 GE Healthcare Discovery NM/CT 870 GE Healthcare Discovery NM/CT D570c GE Healthcare Discovery NM830 GE Healthcare Discovery Xr650 GE Healthcare Discovery XR656 GE Healthcare Discovery XR656+ GE Healthcare EchoPAC (Turnkey) BT06 GE Healthcare Essential GE Healthcare GE Imaging and Ultrasound Products
    affected: vendor fix gehealthcare.com

66 more affected in the full advisory

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Exploit prediction

1.15% chance of exploitation in the next 30 days, higher than 67% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 5.0 AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

  • n/a GE Healthcare Imaging and Ultrasound Products

Classification

Weakness
  • CWE-523 Unprotected Transport of Credentials
  • CWE-522 Insufficiently Protected Credentials

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.