FDA (Devices) recall action 95167
The FDA (Devices) publishes a recall like this one as 2 separate product records. They share a firm, a date and a cause; this page is all of them in one place, so the scale of the action is visible rather than spread across 2 pages.
The National Institute of Standards and Technology (NIST) has identified in the National Vulnerability Database (NVD) that NexGen Healthcare Mirth Connect, prior to version 4.4.1, has a potential vulnerability allowing the deserialization of untrusted data (CVE-2023-43208). Mirth products may have been installed and configured with your ViewPoint / ViewPoint 6 system by GE HealthCare. This vulnerability could allow a malicious actor to access the system and potentially manipulate patient data.
The agency’s own wording, quoted from the enforcement report.
The unit total adds up the quantities the agency stated for each product. Where a product record gave no figure, or gave a weight rather than a count, it contributes nothing — so the real total is at least this, never less.
GE Healthcare is recalling three ViewPoint imaging systems due to a software vulnerability in Mirth Connect that could allow unauthorized access and manipulation of patient data.
GE Healthcare ViewPoint 6 medical imaging systems contain a software vulnerability (CVE-2023-43208) in Mirth Connect that could allow unauthorized access and patient data manipulation. 574 units are affected and distributed nationwide.