GE HealthCare issues guidance for mitigating 11 security bugs in ultrasound devices

Researchers at Nozomi Networks disclosed 11 vulnerabilities in GE Healthcare's Vivid T9 ultrasound systems and associated applications (Common Service Desktop and EchoPAC) that could allow an attacker with physical access to gain administrative privileges, install malware or ransomware, and access or manipulate limited patient data; seven issues score above 7, GE Healthcare coordinated mitigations and reports no known exploitation.