Recall Z-3145-2024 ยท LLZ System, Image Processing, Radiological
GE Healthcare GmbH
ViewPoint; system, imaging processing, radiological
| Date | Sep 13, 2024 (initiated Aug 8, 2024) |
| Status | Open, Classified |
| Reason | The National Institute of Standards and Technology (NIST) has identified in the National Vulnerability Database (NVD) that NexGen Healthcare Mirth Connect, prior to version 4.4.1, has a potential vulnerability allowing the deserialization of untrusted data (CVE-2023-43208). Mirth products may have been installed and configured with your ViewPoint / ViewPoint 6 system by GE HealthCare. This vulnerability could allow a malicious actor to access the system and potentially manipulate patient data. |
| Root cause | Device Design |
| Action | GE Healthcare issued an URGENT MEDICAL DEVICE CORRECTION notice on 08/08/2024 via US Mail. The notice explained the issue, potential risk, and requested the following: You can continue to use your device by following the instructions below: 1.Ensure ViewPoint / ViewPoint 6 is operating in a secure hospital Network such that: a. only authorized personnel have access, b. protections against denial of service and wiretapping/network sniffing are installed by the network operators, and c. access from the Internet is limited where possible 2.Ensure ViewPoint / ViewPoint 6 is operating in a secur |
| Quantity | 3 units |
| Distribution | US Nationwide distribution including in the states of Alabama, Alaska, Arizona, Arkansas, California, Colorado, Connecticut, Delaware, District of Columbia, Florida, Georgia, Idaho, Illinois, Indiana, Iowa, Kansas, Kentucky, Louisiana, Maine, Maryland, Massachusetts, Michigan, Minnesota, Mississippi |
| FDA record | Open on fda.gov |
510(k) clearances named in this recall
| K050943 | GE VIEWPOINT General Electric Co., May 23, 2005 |