GE Healthcare recalls ViewPoint imaging systems due to a potential vulnerability allowing malicious actors to access patient data. Affected systems may have been installed with older versions of Mirth Connect software.
The National Institute of Standards and Technology (NIST) has identified in the National Vulnerability Database (NVD) that NexGen Healthcare Mirth Connect, prior to version 4.4.1, has a potential vulnerability allowing the deserialization of untrusted data (CVE-2023-43208). Mirth products may have been installed and configured with your ViewPoint / ViewPoint 6 system by GE HealthCare. This vulnerability could allow a malicious actor to access the system and potentially manipulate patient data.
GE Healthcare is recalling View:ViewPoint imaging systems that may have been installed with older versions of Mirth Connect software. This vulnerability could let attackers access or manipulate patient data if the system is not properly secured.
The vulnerability allows attackers to exploit untrusted data deserialization in older Mirth Connect software versions. This could lead to unauthorized access to patient information if the system is not properly secured.
Healthcare facilities using GE's ViewPoint imaging systems with older Mirth Connect software versions are most at risk. Patients and staff at these facilities could face data exposure.
Check if your ViewPoint system has a System ID number starting with QB7A, TA99, N26D, M0B7, Q1K1, or FFQW. The affected systems were installed with Mirth Connect versions before 4.4.1.
Identify your ViewPoint system's System ID number from the list: QB7A, TA99, N26D, M0B7, Q1K1, FFQW.
The recall addresses a potential vulnerability in older software versions that could allow unauthorized data access if exploited. The official notice does not specify current data exposure.
Check your ViewPoint system's System ID number against the list: QB7A, TA99, N26D, M0B7, Q1K1, FFQW.
The official recall notice does not provide specific action steps for affected systems.
We’ve drafted a message you can send GE Healthcare to request your refund or repair — edit it as you like.
Subject: Recall Z-3145-2024 — GE Healthcare GE Healthcare Hello, I own a GE Healthcare that is covered by recall Z-3145-2024 from GE Healthcare. I’m writing to arrange the remedy described in the recall (a refund, repair, or replacement as applicable). Could you please tell me the next steps to resolve this? Thank you.
Experiences, tips, and questions from readers. Every comment is reviewed before it appears.
No comments yet — be the first to share your experience.
The facts (hazard, remedy, dates, manufacturer) are pulled from the official FDA recall record. The plain-language summary and step-by-step checklist are written by GovInfoNow to make the official notice easier to act on — they don’t replace it.
