Free tools Windows power users keep installed
One-click scans. No signup required.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Short answer: A May 2024 report described 11 vulnerabilities linked to GE HealthCare’s Vivid ultrasound family and two related software programs, including missing encryption for sensitive data and hardcoded credentials. The reported CVSS 3.1 scores ranged from 5.7 to 9.6. Those findings describe potential security impact—not proof that ransomware was deployed, patient data was stolen, or every GE ultrasound can be attacked remotely.
What was reported in May 2024?
Dark Reading reported on May 16, 2024, that Nozomi Networks Labs had identified 11 vulnerabilities associated with GE HealthCare’s Vivid ultrasound family and two related software programs. The article described issues including sensitive data that was not encrypted and credentials embedded in software. It reported CVSS 3.1 severity scores between 5.7 and 9.6 for the group of issues.
Those figures belong to the set discussed in that news report. They should not be read as a single score for every GE ultrasound product, nor as a prediction that an attack will succeed in every hospital.
Does “open to ransomware and data theft” mean an attack happened?
No confirmed ransomware infection, data theft, or patient injury tied to this disclosure is established by the public notices summarized here. The headline describes possible consequences if a vulnerability is exploited. Public reporting establishes weaknesses and attack scenarios, not a documented incident involving all affected devices.
#1 Best Overall
- Portable Ultrasound Machine Ruisheng M10 ultrasound machine for pregnancy, best for big dogs, pigs, sheep, and goats at home ultrasound pregnancy check with a pre-heated function for using in cold area
- Only 2.1 pounds with a carrying case, lightweight and portable ultrasound machine for pregnancy with a 5.6-inch HD display, and 16 kinds of pseudo-color functions, easy to use for beginners
- With grid-scale and dot-scale designs, it is easy to measure the fetal size and supports routine, backfat, cardiac, and obstetric measurements for pregnant animals ultrasound pregnancy check
- Measurement: Swine: HLA, SLA Goat: STD, SHD, SCRL Scope: large-scale farms, artificial insemination, feed / veterinary ultrasound machine distributors and business, research, home ultrasound machine user and teaching units
- This portable ultrasound machine has B, B+B,4B, B+M, and M display modes, a 256-frame cine loop function, a four-segment electronic focus, and built-in a 2600 mAh battery to enhance the working time
The most serious scenarios in the Dark Reading coverage required physical access. GE HealthCare’s own description of CVE-2020-6977 says that escaping the device’s kiosk mode requires direct physical access. That is materially different from saying the systems are universally reachable and exploitable over the internet.
Which vulnerabilities are specifically named?
CVE-2020-6977: kiosk-mode breakout
GE HealthCare lists CVE-2020-6977 with a CVSS 3.1 score of 8.4. The vendor says the vulnerability can only be exploited by someone with direct, physical access to the device. A successful kiosk escape could give an attacker access beyond the intended ultrasound interface, depending on the device configuration and controls in place.
Rank #2
- DAWEI portable veterinary ultrasound scanner with 3.5MHz Mechanical Sector Probe was designed for animal use.Perfect for small & large pregnant animals like pigs,goat, sheep, large dogs.OB measurement was set already in the system .
- Portable design,drop-resistant soft rubber body protecting it from falling during a diagnosis with an unexpected move.Comfortable Hand-held Imaging, 5.6 inch LED HD Display, Machine Weight was about 2.1 lbs.Easy to Carry.You can use it in farm,or at home.
- This Scanner has B,B+B,4B display mode.it support 4 levels frequency conversion:2.5/3.5/4.0/5.0MHz.DAWEI B-Ultra sound machine can be continue used for more than 4-6working hours.USB, 8GB Memory TF card ports for convenient and fast image storage and playback for more than 4000 Images.
- We provide the most professional after-sales service and product training service . Two year free warranty.What you get was not only a machine ,but a long-time training to support your work from DAWEI .
- Dawei veterinary Medical Corp.,Ltd. is a professional manufacturer of ultrasound scanners that is specialized in the development, manufacture and distribution of high quality ultrasound products.Any questions about our products,please feel free to contact us
CVE-2024-1486: privilege escalation
GE HealthCare lists CVE-2024-1486 with a CVSS 3.1 score of 7.4 and describes it as privilege escalation involving a misconfigured access-control list. The score measures the vulnerability’s technical severity; it does not establish that exploitation is possible from any network location or that every installation is exposed.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteDo not merge separate GE advisories
GE HealthCare’s security page also discusses earlier vulnerabilities affecting EchoPAC Software Only, EchoPAC Turnkey, and ImageVault. The vendor states that ultrasound scanners were not affected by those particular EchoPAC/ImageVault flaws. They are separate products and disclosures, not evidence of one universal vulnerability affecting every GE ultrasound scanner.
Rank #3
- 1️⃣ Entry-Level Model – Lightweight and Portable— Designed for routine pregnancy checks, this 1.59 lb handheld ultrasound unit is easy to carry and simple to operate. The 5.7” HD display provides clear imaging for everyday farm use.
- 2️⃣ 3.5 MHz Waterproof Mechanical Probe— The durable mechanical probe delivers reliable pregnancy detection for dogs, pigs, sheep, and goats. Its waterproof design is well-suited for typical farm environments.
- 3️⃣ Built-In Probe Heating for Cold Conditions— One-touch probe heating helps maintain stable performance in lower temperatures, supporting clearer imaging during winter use.
- 4️⃣ Straightforward Operation for Beginners— An intuitive interface makes it easy to learn and use, even for first-time operators performing basic pregnancy confirmation.
- 5️⃣ Practical and Cost-Effective Solution— A dependable option for breeders who need an affordable ultrasound system for routine checks.
Which GE product families may be involved?
An NHS England summary of a CISA advisory update names several GE Healthcare product families: Vivid, Logiq, Voluson, Versana, ABUS, and Venue. The summary also lists exceptions within some families. A family name alone is therefore not enough to determine exposure.
| Assessment item | Why it matters |
|---|---|
| Exact model and hardware configuration | Products within one family can have different software, controls, and exceptions. |
| Installed software and firmware versions | Applicability and remediation can depend on the release running on the unit. |
| CVE or advisory reference | Confirms whether the specific weakness matches the device and version. |
| Attack prerequisite | Physical-access requirements create a different risk scenario from remote network exploitation. |
| Vendor mitigation status | GE’s notice determines approved updates, configuration changes, or compensating controls. |
| Clinical workflow impact | Maintenance must be planned so an approved change does not interrupt patient care. |
Facilities should verify the exact unit with GE HealthCare rather than infer exposure from the product-family label.
Rank #4
- 🐶VETERINARY-GRADE PREGNANCY & DISEASE DETECTION – Clinically designed for accurate pregnancy confirmation and health diagnostics in dogs, cats, pigs, sheep, horses, and cattle. Trusted by licensed veterinarians, mobile vet clinics, and livestock producers across the U.S.
- 🖥️ 8" HD IPS FULL-VIEW TOUCHSCREEN WITH SMART IMAGING – Ultra-responsive touch display delivers razor-sharp ultrasound imaging in any lighting. Features one-touch auto gain adjustment, dynamic noise reduction, image freeze, real-time measurement, annotation tools, and 16 pseudo-color modes for confident on-site diagnosis.
- 🔋IP67 WATERPROOF & BUILT FOR THE FIELD – Rated IP67 for full dust and water resistance. Operates reliably from -4°F to 122°F (-20°C to 50°C), making it ideal for muddy barns, open pastures, and outdoor farm visits across all U.S. climates and seasons.
- 🧠Lightweight and PORTABLE ULTRASOUND device allows easy transportation between farms or clinics, enhancing effiALL-DAY 10,000mAh BATTERY – UP TO 8 HOURS CONTINUOUS USE – Built-in high-capacity lithium battery powers through a full workday on a single charge. No outlets, no interruptions — perfect for large farm operations, rural house calls, and multi-site clinics.
- 🌎LIGHTWEIGHT, ONE-HAND PORTABLE DESIGN + 2-YEAR WARRANTY – Weighs only 2.75 lbs with integrated hand strap for single-hand operation. Supports multiple probe upgrades (6.5MHz micro-convex, rectal, linear array — sold separately). Connects via USB, HDMI, and TF card. Backed by a 2-year warranty and dedicated customer support.
What earlier advisories add—and what they do not prove
A December 2020 CISA bulletin covered selected GE Healthcare imaging and ultrasound products, including unprotected credential transport and exposure of sensitive system information. It provides useful disclosure context, but it does not prove that every model discussed in the 2024 reporting has those same weaknesses.
The FDA’s cybersecurity index separately lists a January 23, 2020 alert concerning certain GE Healthcare clinical information central stations and telemetry servers. Those systems are not the ultrasound devices at the center of the May 2024 headline.
Best Value
- Fit Model GE Logiq E Logiq I Vivid E Ultrasound Ultrasound Machines Vivid e Echographe Logic-E Echographe Logiq I Echographe Vivid E
- Part Number 5120410-2 5422172 TWBP42 M2836 M2836NO
- NOTED:Not for 5120410, U80321-3R01
- Capacity 4400mAh Type Li-ion Voltage 14.8V Rate 65.12Wh
What GE HealthCare says about residual risk
GE HealthCare says existing mitigations and controls reduce the residual risk from the physical kiosk breakout to an acceptable level. Its product-security materials describe vulnerability assessments that consider product architecture, security controls, and other factors. This is the vendor’s risk characterization, not an independent guarantee that every installation has identical protection.
What healthcare facilities should do now
- Inventory the devices. Record each ultrasound’s exact product name, model, serial number, software or firmware version, location, and network connections.
- Check GE’s Product Security Portal. Review the applicable product notice, affected-version details, mitigation instructions, and any required customer actions.
- Match advisories to the unit. Confirm whether CVE-2020-6977, CVE-2024-1486, or another listed issue applies to the precise configuration.
- Involve clinical engineering and security staff. Coordinate with GE HealthCare support and the hospital’s cybersecurity team before changing software, access controls, or operating procedures.
- Control physical access. Restrict unsupervised access to scanners, service areas, removable media, and attached workstations while remediation is assessed.
- Apply only approved changes. Use vendor-supplied updates or mitigations and schedule them around clinical operations. Do not install consumer antivirus or unapproved operating-system changes on a medical device.
- Monitor for signs of misuse. Use the facility’s established medical-device and network monitoring processes, and escalate unusual logins, kiosk escapes, unauthorized software, or unexpected data transfers.
How to interpret the severity scores
CVSS is a standardized way to describe technical severity. The 5.7–9.6 range reported by Dark Reading covers multiple vulnerabilities with different conditions and impacts. GE HealthCare’s scores of 8.4 for CVE-2020-6977 and 7.4 for CVE-2024-1486 apply to those individual CVEs. None of these numbers alone tells a facility how likely exploitation is in its own environment; physical access, network isolation, compensating controls, software version, and clinical workflow all affect practical risk.
Bottom line for device owners
The 2024 disclosure warrants a product-specific security review, not a blanket conclusion that all GE ultrasound machines are internet-facing ransomware targets. Public information points to vulnerabilities with potentially serious outcomes, while the most prominent kiosk-breakout scenario requires physical access and no confirmed exploitation is established. Identify the exact equipment and software in use, follow GE HealthCare’s current product notices, and have clinical engineering and cybersecurity personnel approve any remediation.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
