Qnc’s opportunity: a cyber security gap in healthcare "A successful exploitation could expose sensitive data such as a limited set of patient health information (PHI) or could allow the attacker to run arbitrary code, which might impact the availability of the system and allow manipulation of PHI," according to CISA's advisory.
GE has identified mitigations and will take proactive measures to ensure proper configuration of the product firewall protection and change default passwords on impacted devices where possible, the advisory notes.