GE — Vulnerabilities & Security Advisories 32

General Electric operates across diverse sectors, including aviation, healthcare, and power generation, with its industrial Internet of Things (IoT) platforms forming a critical infrastructure component. Historically, vulnerabilities within GE’s software ecosystems have frequently involved remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from legacy industrial control systems or web-facing management interfaces. Notable incidents include the 2018 ransomware attack on GE Healthcare, which disrupted MRI and CT scanner operations across multiple hospitals, highlighting the tangible risks of connected medical devices. The current record of 32 Common Vulnerabilities and Exposures underscores persistent challenges in securing heterogeneous hardware and software stacks. These issues typically arise from outdated dependencies, insufficient input validation, and complex network architectures that complicate patch management. Consequently, GE faces ongoing scrutiny regarding its incident response capabilities and the resilience of its critical operational technology against evolving cyber threats.