GE Medical Instrumentation on the Critical List: Five of the vulnerabilities are 10 out of 10 on the criticality scale. Vulnerabilities include Unprotected Storage of Credentials, Improper Input Validation, Use of Hard-coded Credential for Critical Function, Unrestricted Upload of File with Dangerous Type, Inadequate Encryption Strength. The problem was discovered by CyberMDX, who carried out an investigation into the CIC Pro device. GE has said it is not aware of any exploitation of them in the wild.”]
Source: https://www.darkreading.com/abtv/ge-medical-instrumentation-on-the-critical-list/a/d-id/757059