Researchers have found six high-risk vulnerabilities in GE Healthcare products that they’ve collectively dubbed MDhex. The issues involve the use of hard-coded credentials or no credentials at all for remote management features. The CIC Pro Clinical Information Center is a workstation that nurses and caregivers use to monitor real-time waveforms and vital information from multiple patients at the same time, review historical and demographic data, and manage patient alarms. Another vulnerability, CVE-2020-6964, stems from the presence of Kavoom KM MultiMouse software on these devices.”]

