Researchers Uncover Critical Vulnerabilities in GE HealthCare Ultrasound Systems and EchoPAC Software

Nozomi Networks Labs have discovered 11 vulnerabilities in GE HealthCare’s Vivid range of ultrasound machines and associated software that could potentially disrupt medical procedures and compromise patient data. Attackers could deploy ransomware and gain access to the whole ultrasound system, although GE has confirmed its system’s safety risk is controlled. Mitigation measures include patching systems, never leaving devices unattended, and implementing network segmentation and firewall rules.