invasive cardiology security website - ge healthcare/media/documents/us-global/support... ·...

81
GE Healthcare 1 26 September 2017 Invasive Cardiology Security Website Interventional - Invasive Cardiology Product Group: Interventional Invasive Products Mac-Lab IT/XT/XTi, CardioLab IT/XT/XTi, Products: SpecialsLab and ComboLab IT/XT/XTi Recording Systems, Centricity Cardiology Data Management Systems Version(s): 6.9.6 Release 1, 6.9.5 & 6.9 Subject: Security Information Date: 26 September, 2017 Summary The following information is provided to GE Healthcare Technologies customers in regards to known technical security vulnerab ilities associated with Mac-Lab® Hemodynamic, CardioLab® Electrophysiology, SpecialsLab and ComboLab IT Recording Systems for Cath Lab, EP Lab and other interventional labs as well as the Centricity® Cardiology Data Management Systems. Security Patch Base Configuration The security patch base configuration of the Mac-Lab IT/XT/XTi and CardioLab IT/XT/XTi product at release is listed within the MLCL Base Configuration under the Hemodynamic, Electrophysiology and Cardiovascular Information Technologies section of the http://www3.gehealthcare.com/en/Support/Invasive_Cardiology_Product_Security website. Process The following actions are taken whenever Microsoft/OEMs releases new security patches: The Invasive Cardiology Engineering Team performs a security analysis process for supported Mac-Lab IT/XT/XTi, CardioLab IT/XT/XTi, GE Client Review and INW Server hardware/software. If a vulnerability meets Mac-Lab IT/XT/XTi and CardioLab IT/XT/XTi validation criteria, the vulnerability is communicated through the GEHC Product Security Database and Invasive Cardiology Security Website within Three weeks of the patch release. Upon validation of the Mac-Lab IT/XT/XTi and CardioLab IT/XT/XTi vulnerability, the GEHC Product Security Database and Invasive Cardiology Security Website and affected

Upload: others

Post on 27-Jul-2020

4 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

1 26 September 2017

Invasive Cardiology Security Website Interventional - Invasive Cardiology

Product Group: Interventional Invasive Products

Mac-Lab IT/XT/XTi, CardioLab IT/XT/XTi, Products: SpecialsLab and ComboLab IT/XT/XTi Recording Systems, Centricity Cardiology

Data Management Systems

Version(s): 6.9.6 Release 1, 6.9.5 & 6.9

Subject: Security Information

Date: 26 September, 2017

Summary

The following information is provided to GE Healthcare Technologies customers in regards to known technical security vulnerab ilities associated with Mac-Lab®

Hemodynamic, CardioLab® Electrophysiology, SpecialsLab and ComboLab IT Recording Systems for Cath Lab, EP Lab and other interventional labs as well as the Centricity®

Cardiology Data Management Systems.

Security Patch Base Configuration

The security patch base configuration of the Mac-Lab IT/XT/XTi and CardioLab IT/XT/XTi product at release is listed within the MLCL Base Configuration under the

Hemodynamic, Electrophysiology and Cardiovascular Information Technologies section of the

http://www3.gehealthcare.com/en/Support/Invasive_Cardiology_Product_Security website.

Process

The following actions are taken whenever Microsoft/OEMs releases new security patches:

The Invasive Cardiology Engineering Team performs a security analysis process for supported Mac-Lab IT/XT/XTi, CardioLab IT/XT/XTi, GE Client Review and INW

Server hardware/software.

If a vulnerability meets Mac-Lab IT/XT/XTi and CardioLab IT/XT/XTi validation criteria, the vulnerability is communicated through the GEHC Product Security Database and

Invasive Cardiology Security Website within Three weeks of the patch release.

Upon validation of the Mac-Lab IT/XT/XTi and CardioLab IT/XT/XTi vulnerability, the GEHC Product Security Database and Invasive Cardiology Security Website and affected

Page 2: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

2 26 September 2017

Mac-Lab IT/XT/XTi and CardioLab IT/XT/XTi Security Patch Installation Instructions are updated.

The Mac-Lab IT/XT/XTi and CardioLab IT/XT/XTi vulnerability validation criteria are as follows: Any vulnerability that allows malware to alter or deny Mac-Lab IT/XT/XTi and CardioLab

IT/XT/XTi functionality and/or infect and propagate through normal system use.

Customers are responsible to stay informed with Microsoft vulnerability notifications and to visit the Invasive Cardiology we bsites to understand the Mac-Lab IT/XT/XTi and

CardioLab IT/XT/XTi impact . Once a security patch is validated, customers are responsible for the installation of security patches. All Mac-Lab IT/XT/XTi and CardioLab IT/XT/XTi

Security Patch Installation Instructions are available on the Invasive Cardiology Security Website below the Validated Patches table.

Vulnerabilities exposed after the Mac-Lab IT/XT/XTi and CardioLab IT/XT/XTi product release which do not meet the criteria to be validated are not listed within the GEHC Product

Security Database and Invasive Cardiology Security Website. These vulnerabilities are deemed to be non-critical and/or outside normal clinical workflow of the Mac-Lab IT/XT/XTi,

CardioLab IT/XT/XTi and Centricity INW systems and will not be validated. Unlisted patches should not be installed on the products in order to el iminate malfunction and

breakdown risks.

Page 3: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

3 26 September 2017

Contents Revision History ...................................................................................................................................................................................................................................................... 5

Installation of the Security Patches on MLCL systems ............................................................................................................................................................................................ 5

How to Log On to Acquisition and Review Systems ............................................................................................................................................................................................ 5

How to Log On to the Centricity Cardiology INW Server ..................................................................................................................................................................................... 5

How to Log On to MLCL Software Only Systems ................................................................................................................................................................................................. 6

How to Install Printer Firmware .......................................................................................................................................................................................................................... 6

How to Install HP NIC Driver on the INW Server (HP ProLiant ML350 G8) ......................................................................................................................................................... 6

How to Install HP NIC Driver on the INW Server (HP ProLiant DL370 G6) .......................................................................................................................................................... 6

How to Install HP System Management Homepage Patch on the INW Server – HPSBMU03051 ...................................................................................................................... 7

How to Install HP System Management Homepage Patch on the INW Server – HPSBMU03380 ...................................................................................................................... 8

OPTIONAL – How to Install INW Server Performance Enhancement.................................................................................................................................................................. 8

How to Install Adobe Reader APSB15-15 .......................................................................................................................................................................................................... 10

Turn On Windows Update Service Configuration - Windows Server 2008 R2 SP1 (KB976932) Only................................................................................................................ 10

Turn Off Windows Update Service Configuration - Windows Server 2008 R2 SP1 (KB976932) Only ............................................................................................................... 10

OPTIONAL – How to Install Plugin 20007 – Disable SSL V2/V3 – KB187498 ..................................................................................................................................................... 11

OPTIONAL – How to Install Plugin 35291 –Weak Hashing ................................................................................................................................................................................ 11

OPTIONAL – How to Install Plugin 65821 –SSL RC4 Cipher Suites Supported ................................................................................................................................................... 12

OPTIONAL – How Remove Vulnerability for Plugin 63155 – Microsoft Windows Unquoted Service Path Enumeration ................................................................................. 12

Patch Links ............................................................................................................................................................................................................................................................ 14

Page 4: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

4 26 September 2017

MLCL v6.9.6 ....................................................................................................................................................................................................................................................... 14

6.9.6 R1 Requirements ..................................................................................................................................................................................................................................... 14

MLCL V6.9.6 Security Updates .......................................................................................................................................................................................................................... 26

MLCL v6.9.6 Optional Security Updates ............................................................................................................................................................................................................ 40

MLCL v6.9.5 ....................................................................................................................................................................................................................................................... 42

MLCL v6.9.5 Security Updates ........................................................................................................................................................................................................................... 45

MLCL v6.9.5 Firmware ...................................................................................................................................................................................................................................... 48

MLCL v6.9 .......................................................................................................................................................................................................................................................... 49

MLCL v6.9 Security Updates .............................................................................................................................................................................................................................. 55

MLCL v6.9 Firmware ......................................................................................................................................................................................................................................... 58

DMS Security Patches ....................................................................................................................................................................................................................................... 59

Definitions ............................................................................................................................................................................................................................................................. 80

Contact Information .............................................................................................................................................................................................................................................. 81

Page 5: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

5 26 September 2017

Revision History Revision Date Comments

1.0 26 September 2017 • 6.9.6 document separation

• September Unqualified Patches

Installation of the Security Patches on MLCL systems

How to Log On to Acquisition and Review Systems

When starting up an Mac-Lab, CardioLab or SpecialsLab Acquisition or Review system, an auto-logon sequence starts and automatically logs on to the operating system. To install

a security patch, the user must be logged on as mlcltechuser.

NOTE: Password information is contained within the Security Guide Manual. Otherwise, contact the system administrator or GE Technical Support for current

password information.

1. Power on the Acquisition system. 2. The system boots up to the Custom Shell screen.

3. Press Ctrl + Action + Del.

4. Click Logoff. On Windows XP, click Logoff again.

5. Click OK. 6. Immediately hold down the Shift key until the login window is displayed.

7. Log on to the operating system locally as mlcltechuser.

8. Log on to the Custom Shell locally as mlcltechuser.

How to Log On to the Centricity Cardiology INW Server

Page 6: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

6 26 September 2017

Password information is contained within the Security Guide Manual. Otherwise, contact the system administrator or GE Technical Support for current password information.

Logon to the INW Server as administrator

How to Log On to MLCL Software Only Systems

Since Software Only systems are supported by the customer, the system needs to be logged into with an administrator account .

How to Install Printer Firmware

The system which will apply the firmware to the printer should be provided by the customer.

NOTE: Mac-Lab CardioLab system should not be used to download and/or apply the Printer Firmware.

Follow the download link in the table

Select the appropriate printer

Select English and the applicable MLCL operating system

Select English and under the Firmware category select the applicable Firmware Update Utility and Click Download

Launch the firmware installer and follow the instructions to complete the firmware update

How to Install HP NIC Driver on the INW Server (HP ProLiant ML350 G8)

1. Using a non-MLCL system, visit the URL and download cp025039.exe.

2. Place cp025039.exe on removable media.

3. Ensure the INW Server is the HP ProLiant ML350 G8, log on to the server as administrator.

4. Insert the removable media and launch the cp025039.exe application.

5. Follow the installation instructions to complete the installation.

How to Install HP NIC Driver on the INW Server (HP ProLiant DL370 G6)

Page 7: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

7 26 September 2017

1. Using a non-MLCL system, visit the URL and download cp024564.exe.

2. Place cp024564.exe on removable media.

3. Ensure the INW Server is the HP ProLiant DL370 G6, log on to the server as administrator.

4. Insert the removable media and launch the cp024564.exe application.

5. Follow the installation instructions to complete the installation.

How to Install HP System Management Homepage Patch on the INW Server – HPSBMU03051

NOTE: HPSBMU03051 must be installed before HPSBMU03380.

1. Using a non-MLCL system, visit the URL and download cp023716.exe

2. Place cp023716.exe on removable media

3. Log on to the server as administrator.

4. In Windows Explorer, navigate to the to the location on the removable media where cp023716.exe was placed

5. Right-click cp023716.exe.

6. Select Run as Administrator.

7. Click Install.

8. Click Next.

9. On each screen, keep the default settings and click Next to advance through the install

wizard.

10. Click Finish.

11. In Windows Explorer, navigate to C:\HP\hpsmh\bin\hpsmhd.exe.

12. Right-click and select Properties.

13. Select the Details tab.

14. Verify the File Version is 7.3.3.1.

15. Close all windows.

16. Stop the HP System Management Homepage service.

17. Within Windows Explorer, navigate to C:\HP\sslshare and permanently delete cert.pem and file.pem.

18. Restart HP System Management Homepage service.

19. Verify that the certificates have been recreated. Within Windows Explorer navigate to C:\HP\sslshare and locate and verify that the cert.pem and file.pem files are there.

20. Close Windows Explorer.

21. At the INW Server desktop, delete the HP System Management Homepage icon from the

Page 8: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

8 26 September 2017

desktop.

22. Restart the INW server to complete the installation

How to Install HP System Management Homepage Patch on the INW Server – HPSBMU03380

NOTE: HPSBMU03051 must be installed before HPSBMU03380.

1. Using a non-MLCL system, visit the URL and download CP028035.exe 2. Place CP028035.exe on removable media

3. Log on to the server as administrator.

4. In Windows Explorer, navigate to the to the location on the removable media where CP028035.exe was placed

5. Right-click cp028035exe.

6. Select Run as Administrator.

7. Click Install.

8. Click Next.

9. On each screen, keep the default settings and click Next to advance through the

install wizard.

10. Click Finish.

11. In Windows Explorer, navigate to C:\HP\hpsmh\bin\hpsmhd.exe.

12. Right-click and select Properties.

13. Select the Details tab.

14. Verify the File Version is 7.5.4.3.

15. Close all windows.

16. At the INW Server desktop, delete the HP System Management Homepage icon from

the desktop.

17. Restart the INW server to complete the installation

OPTIONAL – How to Install INW Server Performance Enhancement

Page 9: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

9 26 September 2017

The following patches do not resolve security vulnerabilities and are optional. These patches may improve network performanc e. The installation procedure below must be

followed and all listed patches deployed together. This deployment may take up to 12 hours, the large percentage within the KB2775511 installation.

1. Using a non-MLCL system, visit and download the following patches to removable media.

Visit http://catalog.update.microsoft.com/ and enter the below KB numbers to access the

patches. KB2775511 - http://support .microsoft .com/kb/2775511

KB2732673 - http://support.microsoft.com/kb/2732673

KB2728738 – http://support.microsoft.com/kb/2728738

KB2878378 – http://support.microsoft.com/kb/2878378

The following patches are summarized at KB2473205 - https://support.microsoft.com/en-us/kb/2473205

KB2535094 – http://support.microsoft.com/kb/2535094 Download at - https://support.microsoft.com/en-us/hotfix/kbhotfix?kbnum=2535094&kbln=en-us KB2914677 –

http://support.microsoft.com/kb/2914677 Download at - https://support.microsoft.com/en-us/hotfix/kbhotfix?kbnum=2914677&kbln=en-us KB2831013 –

http://support.microsoft.com/kb/2831013 Download at - https://support.microsoft.com/en-us/hotfix/kbhotfix?kbnum=2831013&kbln=en-us KB3000483 –

http://support.microsoft.com/kb/3000483 Download at - http://catalog.update.microsoft.com/

KB3080140 – http://support.microsoft.com/kb/3080140 Download at - http://catalog.update.microsoft.com/

KB3044428 – http://support.microsoft.com/kb/3044428 Download at - https://support.microsoft.com/en-us/hotfix/kbhotfix?kbnum=3044428&kbln=en-us

2. Log on to the INW Server as Administrator.

3. Insert the removable media and install the patches in the order listed above.

4. Follow the Microsoft installation instructions to complete the installation of the patches.

5. Select Windows Start -> Run and enter Regedit and Enter.

6. In Regedit window, navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Tcpip

7. In the dialog Menu, select File -> Export. Name the file MLCLRegSave.reg and place in the C:\Temp directory.

8. In Regedit windows, from Tcpip navigate to Parameters.

9. In the dialog Menu, select Edit -> New -> DWORD (32-bit) Value. A new entry is created and name it ‘MaxUserPort’.

10. Right click on ‘MaxUserPort’, select Modify and enter the value 65534 with a base of Decimal.

11. Follow the same procedure above and create a new entry named ‘TcpTimedWaitDelay’. Enter the value 60 with a base of Decimal.

12. Exit the Regedit dialog.

13. Reboot the INW Server.

Page 10: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

10 26 September 2017

How to Install Adobe Reader APSB15-15

1. Using a non-MLCL system, visit the URL and download AdbeRdrUpd11012_MUI.msp.

2. Place AdbeRdrUpd11012_MUI.mspon removable media.

3. Log on to the MLCL device as administrator or mlcltechuser.

4. Insert the removable media and launch AdbeRdrUpd11012_MUI.msp. Accept all pop-up warnings and UAC dialogs.

5. Select Update.

6. Select Finish.

7. Launch Adobe Reader XI from Start > All Programs. 8. Select Tools menu to hide Tools window.

9. Select Help menu, then About Adobe Reader XI. Ensure the version is 11.0.12.

10. Close all dialogs.

Turn On Windows Update Service Configuration - Windows Server 2008 R2 SP1 (KB976932) Only

The below steps must be performed on Centricity Cardiology INW Servers before installing Windows Server 2008 R2 SP1 (KB976932). 1. On an INW Domain Controller, log on to Windows as Administrator or a member of that group. On an INW Member Server, log on to Windows as mlcltechuser.

2. Select Start > Run. 3. Type services.msc and press Enter.

4. Right-click the Windows Update service and select Properties.

5. Select Automatic from the Startup type drop-down.

6. Click Start.

7. Click Apply and then click OK.

8. Close the Services Console window.

Turn Off Windows Update Service Configuration - Windows Server 2008 R2 SP1 (KB976932) Only

These below must be performed on Centricity Cardiology INW Servers after installing Windows Server 2008 R2 SP1 (KB976932). 1. On an INW Domain Controller, log on to Windows as Administrator or a member of that group. On an INW Member Server, log on to Windows as mlcltechuser.

2. Select Start > Run.

3. Type services.msc and press Enter.

4. Right-click the Windows Update service and select Properties.

Page 11: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

11 26 September 2017

5. Select Manual from the Startup type drop-down.

6. Click Stop.

7. Click Apply and then click OK.

8. Close the Services Console window.

OPTIONAL – How to Install Plugin 20007 – Disable SSL V2/V3 – KB187498

1. Log on to Windows as Administrator or a member of that group.

2. Open a command prompt and enter the following commands:

3. REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0" /f 4. REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client" /v DisabledByDefault /t

REG_DWORD /d 00000001 /f 5. REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server" /v DisabledByDefault /t

REG_DWORD /d 00000001 /f 6. REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server" /v Enabled /t REG_DWORD /d

00000000 /f 7. REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0" /f 8. REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server" /f 9. REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server" /v DisabledByDefault /t

REG_DWORD /d 00000001 /f 10. REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server" /v Enabled /t REG_DWORD /d

00000000 /f 11. Close the command prompt.

OPTIONAL – How to Install Plugin 35291 –Weak Hashing

1. Load your security certificate in SQL Server on each ML/CL system in the network (server, acquisitions, reviews and virtual reviews) or the ML/CL standalone acquisition.

2. Disable RDP on each member of the network.

a. My Computer>Properties>Remote settings>Remote b. Check “Don’t allow connections to

this computer”.

c. Click ok and

Page 12: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

12 26 September 2017

reboot.

OPTIONAL – How to Install Plugin 65821 –SSL RC4 Cipher Suites Supported

1. Log on to Windows as Administrator or a member of that group.

2. Open a command prompt and enter the following commands:

3. REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 128/128" /f

4. REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 128/128" /v Enabled /t REG_DWORD /d 00000000 /f

5. REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 40/128" /f 6. REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 40/128" /v Enabled /t REG_DWORD /d

00000000 /f 7. REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 56/128" /f 8. REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 56/128" /v Enabled /t REG_DWORD /d

00000000 /f 9. Close the command prompt.

OPTIONAL – How Remove Vulnerability for Plugin 63155 – Microsoft Windows Unquoted Service Path Enumeration

1. Log on to Windows as Administrator or a member of that group 2. Open Regedit do the following

a. On Windows 7 i. Navigate to HKLM\System\CurrentControlset\Services\RtkAudioService ii. Change the imagepath key value from:

C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe To: “C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe”

Note: The leading and trailing Quote marks are part of the key value. The quotes are what removes the vulnerability

b. On Windows 2008R2 i. Navigate to HKLM\System\CurrentControlset\Services\Gems Task Scheduler

Page 13: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

13 26 September 2017

ii. Change the imagepath key value from: C:\Program Files (x86)\GE Healthcare\MLCL\Bin\ArchiveUtility\GEMS_TaskSvc.exe To: “C:\Program Files (x86)\GE Healthcare\MLCL\Bin\ArchiveUtility\GEMS_TaskSvc.exe” Note: The leading and trailing Quote marks are part of the key value. The quotes are what removes the vulnerability

Page 14: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

14 26 September 2017

Patch Links

The patches displayed below are qualified on an independent basis and can be installed on a one-by-one basis, although it is recommended that all qualified patches are installed.

There are dependencies within the qualified patch list . In the table below, it is recommended the patches are installed in order from top to bottom to ensure all pre-requisites are met

for all patches. On occasion the patch dependencies require system reboots which are identified in the table below.

NOTE: Due to site configurations, system patch set , qualified patches which have been installed previously or patch dependencies, some patches could fail to install due to the

functionality is already installed. The Microsoft patch installer will alert you to this issue. It this occurs, please continue with the next patch installation.

Alternate Patch locations: In early 2016 Microsoft announced that some patches would no longer be available on the Microsoft Download Center

https://blogs.technet .microsoft .com/msrc/2016/04/29/changes-to-security-update-links/ Therefore, some of the links provided below may not work. Microsoft may move/remove

these links at any time without notice. However, if the links do not work, there are two alternate methods for downloading patche s. The first is the Microsoft Catalog

http://catalog.update.microsoft .com . Most fixes not on Microsoft Download Center will be available from the Microsoft Catalog. If a fix is not available from the Mic rosoft Catalog,

Microsoft has monthly ISO files of the security updates available at https://support .microsoft .com/en-us/kb/913086 To use the ISOs, determine the month of the patch, download the

applicable ISO and extract the patch. If after exhausting all three methods, you are still unable to obtain a patch, please c ontact GE Technical Support for further assistance.

Recommendation: Use Internet Explorer (IE) for Catalog download. If you are using the cart feature to download patches, to see the cart it requires opening another tab or new

window.

MLCL v6.9.6

6.9.6 R1 Requirements

Please verify that you are running 6.9.6 Release 1 using the following procedure before proceeding: 1. Launch the Mac-Lab CardioLab application. 2. Select Help > About Mac-Lab (or CardioLab, as applicable). 3. Verify the version number is 6.9.6 Release 1. 4. Click Close. 5. Close the application.

Updates may be applied at any time other than while the Mac-Lab IT/XT/XTi, CardioLab IT/XT/XTi or SpecialsLab application is open.

Page 15: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

15 26 September 2017

Updates must be re-applied if the system is re-imaged.

Updates apply to both networked and standalone systems.

Best practice is to update all applicable MLCL systems at the site.

If any Mac-Lab IT/CardioLab IT system has a DMS or Carddas client , use the Mac-Lab IT/XT/XTi, CardioLab IT/XT/XTi or SpecialsLab instructions.

INW Server Acquisition - Mac-Lab IT/XT/XTi ,

CardioLab IT/XT/XTi and SpecialsLab

GE Client Review Workstation Virtual Review

Operating

System

Platform

Windows Server 2008 R2 SP1 Windows 7 SP1 Windows 7 SP1 Windows 7 SP1

Current

Unqualified

Vulnerability

KB4025337(CVE-2017-8589, CVE-2017-

8582, CVE-2017-8565, CVE-2017-8563,

CVE-2017-8495, CVE-2017-8486)

KB4034679(CVE-2017-8620, CVE-2017-

0174, CVE-2017-8633)

KB4038779(CVE-2017-0161)

KB4025337(CVE-2017-8589, CVE-2017-

8582, CVE-2017-8565, CVE-2017-8563,

CVE-2017-8495, CVE-2017-8486)

KB4034679(CVE-2017-8620, CVE-2017-

0174, CVE-2017-8633)

KB4038779(CVE-2017-0161)

KB4025337(CVE-2017-8589, CVE-2017-

8582, CVE-2017-8565, CVE-2017-8563,

CVE-2017-8495, CVE-2017-8486)

KB4034679(CVE-2017-8620, CVE-2017-

0174, CVE-2017-8633)

KB4038779(CVE-2017-0161)

KB4025337(CVE-2017-8589, CVE-2017-

8582, CVE-2017-8565, CVE-2017-8563,

CVE-2017-8495, CVE-2017-8486)

KB4034679(CVE-2017-8620, CVE-2017-

0174, CVE-2017-8633)

KB4038779(CVE-2017-0161)

Patch Download URL Download URL Download URL Download URL

INW Server Acquisition - Mac-Lab IT/XT/XTi ,

CardioLab IT/XT/XTi and SpecialsLab

GE Client Review Workstation Virtual Review

MS15-127

KB3100465

(Domain

Controller only)

https://www.microsoft.com/en- us/download/details.aspx?id=50127

N/A N/A N/A

MS15-067

KB3069762

N/A https://www.microsoft .com/en-

us/download/details.aspx?id=47833

https://www.microsoft .com/en-

us/download/details.aspx?id=47833

https://www.microsoft.com/en- us/download/details.aspx?id=47833

Page 16: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

16 26 September 2017

HP System

Management

Homepage

HPSBMU03380

Version:

7.5.4.3(1 Apr

2016)

https://h20566.www2.hpe.com/hpsc/s wd/public/detail?idx=&action=driverDo cument&itemLocale=&swItemId=MTX_ 544617581c264c8eaafe6b273a&mode

Please see section - How to Install HP System Management Homepage Patch on the INW Server – HPSBMU03380

NOTE: HPSBMU03051 must be installed

before HPSBMU03380.

N/A N/A N/A

OPTIONAL –

INW Server

Performance

Enhancement

Please see section – OPTIONAL - How

to Install INW Server Performance

Enhancement

N/A N/A N/A

Adobe Reader

APSB15-15

ftp://ftp.adobe.com/pub/adobe/reader/

win/11.x/11.0.12/misc/ Download file -

AdbeRdrUpd11012_MUI.msp

Please see section – How to Install

Adobe Reader APSB15-15

ftp://ftp.adobe.com/pub/adobe/reader/

win/11.x/11.0.12/misc/ Download file -

AdbeRdrUpd11012_MUI.msp

Please see section – How to Install

Adobe Reader APSB15-15

ftp://ftp.adobe.com/pub/adobe/reader/

win/11.x/11.0.12/misc/ Download file -

AdbeRdrUpd11012_MUI.msp

Please see section – How to Install

Adobe Reader APSB15-15

ftp://ftp.adobe.com/pub/adobe/reader/

win/11.x/11.0.12/misc/ Download file -

AdbeRdrUpd11012_MUI.msp

Please see section – How to Install

Adobe Reader APSB15-15

INW Server Acquisition - Mac-Lab IT/XT/XTi ,

CardioLab IT/XT/XTi and SpecialsLab

GE Client Review Workstation Virtual Review

HP INW Server

NIC Driver (HP

ProLiant ML350

G8)

http://h20566.www2.hpe.com/hpsc/sw

d/public/detail?swItemId=MTX_de344f

22b2c245ec859d7821e3

Please see section - How to Install HP

NIC Driver on the INW Server (HP

ProLiant ML350 G8)

N/A N/A N/A

Page 17: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

17 26 September 2017

HP INW Server

NIC Driver (HP

ProLiant DL370

G6)

http://h20566.www2.hpe.com/hpsc/sw

d/public/detail?swItemId=MTX_109438

fbecd6411388820b630c

Please see section - How to Install HP

NIC Driver on the INW Server (HP

ProLiant DL370 G6)

N/A N/A N/A

MS14-049

KB2918614

https://www.microsoft .com/en-

us/download/details.aspx?id=43764

MS09-043

KB947318

https://www.microsoft .com/en-

us/download/details.aspx?id=22505

https://www.microsoft .com/en-

us/download/details.aspx?id=22505

MS11-025

KB2538242

https://www.microsoft .com/en-

us/download/details.aspx?id=26347

MS11-049

KB2251487

https://www.microsoft .com/en-

us/download/details.aspx?id=26419

https://www.microsoft .com/en-

us/download/details.aspx?id=26419

https://www.microsoft .com/en-

us/download/details.aspx?id=26419

https://www.microsoft .com/en-

us/download/details.aspx?id=26419

KB2539530 https://www.microsoft .com/en-

us/download/details.aspx?id=26416

MS12-034:

KB2596672

https://www.microsoft .com/en-

us/download/details.aspx?id=29730

https://www.microsoft .com/en-

us/download/details.aspx?id=29730

N/A N/A

MS13-075

KB2687413

N/A N/A https://www.microsoft .com/en-

us/download/details.aspx?id=40196

N/A

KB2852386 https://www.microsoft .com/en-

us/download/details.aspx?id=42739

INW Server Acquisition - Mac-Lab IT/XT/XTi ,

CardioLab IT/XT/XTi and SpecialsLab

GE Client Review Workstation Virtual Review

MS13-081

KB2862330

https://www.microsoft .com/en-

us/download/details.aspx?id=40372

https://www.microsoft .com/en-

us/download/details.aspx?id=40507

https://www.microsoft .com/en-

us/download/details.aspx?id=40507

https://www.microsoft .com/en-

us/download/details.aspx?id=40507

KB967642 https://www.microsoft .com/en-

us/download/details.aspx?id=21751

KB2862152 https://www.microsoft .com/en-

us/download/details.aspx?id=41018

Page 18: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

18 26 September 2017

KB2893519 https://www.microsoft .com/en-

us/download/details.aspx?id=41017

MS13-090

KB2900986

https://www.microsoft .com/en-

us/download/details.aspx?id=40921

MS13-095

KB2868626

https://www.microsoft .com/en-

us/download/details.aspx?id=40930

KB2891804 https://www.microsoft .com/en-

us/download/details.aspx?id=41268

MS13-101

KB2887069

https://www.microsoft .com/en-

us/download/details.aspx?id=41276

MS13-099

KB2892074

https://www.microsoft .com/en-

us/download/details.aspx?id=41226

MS13-098

KB2893294

https://www.microsoft .com/en-

us/download/details.aspx?id=41217

MS14-009

KB2911501

https://www.microsoft .com/en-

us/download/details.aspx?id=41835

KB2919469 https://www.microsoft .com/en-

us/download/details.aspx?id=41785

MS14-007

KB2912390

https://www.microsoft .com/en-

us/download/details.aspx?id=41758

KB2830477 https://www.microsoft .com/en-

us/download/details.aspx?id=41730

KB2929733 https://www.microsoft .com/en-

us/download/details.aspx?id=42175

INW Server Acquisition - Mac-Lab IT/XT/XTi ,

CardioLab IT/XT/XTi and SpecialsLab

GE Client Review Workstation Virtual Review

KB2908783 https://www.microsoft .com/en-

us/download/details.aspx?id=42340

KB2928562 https://www.microsoft .com/en-

us/download/details.aspx?id=42331

Page 19: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

19 26 September 2017

KB2843630 https://www.microsoft .com/en-

us/download/details.aspx?id=41706

KB2871997 https://www.microsoft .com/en-

us/download/details.aspx?id=42765

MS14-026

KB2931356

https://www.microsoft .com/en-

us/download/details.aspx?id=42768

MS14-024

KB2817330

https://www.microsoft .com/en-

us/download/details.aspx?id=42862

MS14-036

KB2957509

https://www.microsoft .com/en-

us/download/details.aspx?id=43180

MS14-036

KB2878233

https://www.microsoft .com/en-

US/download/details.aspx?id=43330

MS14-033

KB2939576

https://www.microsoft .com/en-

us/download/details.aspx?id=43162

MS14-031

KB2957189

https://www.microsoft .com/en-

us/download/details.aspx?id=43143

https://www.microsoft .com/en-

us/download/details.aspx?id=43147

https://www.microsoft .com/en-

us/download/details.aspx?id=43147

https://www.microsoft .com/en-

us/download/details.aspx?id=43147

HP System

Management

Homepage

HPSBMU03051

Version:

7.3.3.1(19 Jun

2014)

http://h20564.www2.hpe.com/hpsc/sw

d/public/detail?swItemId=MTX_e8076c

2a35804685ad65b2b1ba

Please see section - How to Install HP

System Management Homepage Patch

on the INW Server – HPSBMU03051

N/A N/A N/A

MS14-036

KB2957503

https://www.microsoft .com/en-

us/download/details.aspx?id=43194

INW Server Acquisition - Mac-Lab IT/XT/XTi ,

CardioLab IT/XT/XTi and SpecialsLab

GE Client Review Workstation Virtual Review

KB2800095 https://www.microsoft .com/en-

us/download/details.aspx?id=42363

MS14-040

KB2961072

https://www.microsoft .com/en-

us/download/details.aspx?id=43459

Page 20: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

20 26 September 2017

MS14-039

KB2973201

https://www.microsoft .com/en-

us/download/details.aspx?id=43475

KB2973351 https://www.microsoft .com/en-

us/download/details.aspx?id=43471

MS14-046

KB2937610

https://www.microsoft .com/en-

us/download/details.aspx?id=43954

MS14-046

KB2943357

https://www.microsoft .com/en-

us/download/details.aspx?id=43930

MS14-045

KB2976897

https://www.microsoft .com/en-

us/download/details.aspx?id=43885

MS14-047

KB2978668

https://www.microsoft .com/en-

us/download/details.aspx?id=43842

KB2966583 https://www.microsoft .com/en-

us/download/details.aspx?id=43470

MS14-045

KB2993651

https://www.microsoft .com/en-

us/download/details.aspx?id=44040

MS14-053

KB2973112

https://www.microsoft .com/en-

us/download/details.aspx?id=44184

KB2977728 https://www.microsoft .com/en-

us/download/details.aspx?id=44086

KB2978092 https://www.microsoft .com/en-

us/download/details.aspx?id=44131

KB2985461 https://www.microsoft .com/en-

us/download/details.aspx?id=44100

KB2984972 https://www.microsoft .com/en-

us/download/details.aspx?id=44336

INW Server Acquisition - Mac-Lab IT/XT/XTi ,

CardioLab IT/XT/XTi and SpecialsLab

GE Client Review Workstation Virtual Review

MS14-057

KB2972100

https://www.microsoft .com/en-

us/download/details.aspx?id=44312

Page 21: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

21 26 September 2017

MS14-057

KB2979570

https://www.microsoft .com/en-

us/download/details.aspx?id=44327

KB2977292 https://www.microsoft .com/en-

us/download/details.aspx?id=44335

MS14-072

KB2978120

https://www.microsoft .com/en-

us/download/details.aspx?id=44603

MS14-078

KB2991963

https://www.microsoft .com/en-

us/download/details.aspx?id=44708

MS14-066

KB2992611

https://www.microsoft .com/en-

us/download/details.aspx?id=44618

https://www.microsoft .com/en-

us/download/details.aspx?id=44633

https://www.microsoft .com/en-

us/download/details.aspx?id=44633

https://www.microsoft .com/en-

us/download/details.aspx?id=44633

MS14-071

KB3005607

https://www.microsoft .com/en-

us/download/details.aspx?id=44778

MS14-064

KB3006226

https://www.microsoft .com/en-

us/download/details.aspx?id=44770

MS14-064

KB3010788

https://www.microsoft .com/en-

us/download/details.aspx?id=44861

MS14-074

KB3003743

https://www.microsoft .com/en-

us/download/details.aspx?id=44852

MS14-068

KB3011780

https://www.microsoft .com/en-

us/download/details.aspx?id=44966

KB3006625 https://www.microsoft .com/en-

us/download/details.aspx?id=45043

KB3013410 https://www.microsoft .com/en-

us/download/details.aspx?id=45160

KB3014406 https://www.microsoft .com/en-

us/download/details.aspx?id=45191

MS15-007

KB3014029

https://www.microsoft .com/en-

us/download/details.aspx?id=45351

INW Server Acquisition - Mac-Lab IT/XT/XTi ,

CardioLab IT/XT/XTi and SpecialsLab

GE Client Review Workstation Virtual Review

Page 22: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

22 26 September 2017

MS15-003

KB3021674

https://www.microsoft .com/en-

us/download/details.aspx?id=45417

MS15-005

KB3022777

https://www.microsoft .com/en-

us/download/details.aspx?id=45479

KB3020338 https://www.microsoft .com/en-

us/download/details.aspx?id=45714

MS15-014

KB3004361

https://www.microsoft .com/en-

us/download/details.aspx?id=45565

KB3006137 https://www.microsoft .com/en-

us/download/details.aspx?id=45889

MS15-027

KB3002657

https://www.microsoft .com/en-

us/download/details.aspx?id=46200

MS15-028

KB3030377

https://www.microsoft .com/en-

us/download/details.aspx?id=46126

MS15-021

KB3032323

https://www.microsoft .com/en-

us/download/details.aspx?id=45969

MS15-020

KB3033889

https://www.microsoft .com/en-

us/download/details.aspx?id=46153

KB3033929 https://www.microsoft .com/en-

us/download/details.aspx?id=46083

MS15-023

KB3034344

https://www.microsoft .com/en-

us/download/details.aspx?id=45982

MS15-029

KB3035126

https://www.microsoft .com/en-

us/download/details.aspx?id=45962

MS15-024

KB3035132

https://www.microsoft .com/en-

us/download/details.aspx?id=46133

MS15-020

KB3039066

https://www.microsoft .com/en-

us/download/details.aspx?id=46275

MS15-041

KB3037574

https://www.microsoft .com/en-

us/download/details.aspx?id=46528

Page 23: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

23 26 September 2017

INW Server Acquisition - Mac-Lab IT/XT/XTi ,

CardioLab IT/XT/XTi and SpecialsLab

GE Client Review Workstation Virtual Review

MS15-038

KB3045685

https://www.microsoft .com/en-

us/download/details.aspx?id=46461

MS15-035

KB3046306

https://www.microsoft .com/en-

us/download/details.aspx?id=46495

MS15-034

KB3042553

https://www.microsoft .com/en-

us/download/details.aspx?id=46480

https://www.microsoft .com/en-

us/download/details.aspx?id=46501

https://www.microsoft .com/en-

us/download/details.aspx?id=46501

https://www.microsoft .com/en-

us/download/details.aspx?id=46501

MS15-037

KB3046269

https://www.microsoft .com/en-

us/download/details.aspx?id=46499

MS15-039

KB3046482

https://www.microsoft .com/en-

us/download/details.aspx?id=46479

MS15-038

KB3045999

https://www.microsoft .com/en-

us/download/details.aspx?id=46556

KB3020370 https://www.microsoft .com/en-

us/download/details.aspx?id=46737

KB3048761 https://www.microsoft .com/en-

us/download/details.aspx?id=46795

Reboot Required

Make the following Registry Change

[HKEY_CURRENT_USER\Software\M icrosoft\Windows\CurrentVersion\ WinTrust\Trust Providers\Software Publishing]

State=dword:00023c00

Page 24: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

24 26 September 2017

KB2901907 https://www.microsoft.com/en- us/download/details.aspx?id=42642

Right click and Run as Administrator

Page 25: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

25 26 September 2017

INW Server Acquisition - Mac-Lab IT/XT/XTi ,

CardioLab IT/XT/XTi and SpecialsLab

GE Client Review Workstation Virtual Review

Make the following Registry Change

[HKEY_CURRENT_USER\Software\M icrosoft\Windows\CurrentVersion\ WinTrust\Trust Providers\Software Publishing]

State=dword:00010000

MS14-072

KB2978128

https://www.microsoft .com/en-

us/download/details.aspx?id=44686

KB2923545 https://www.microsoft .com/en-

us/download/details.aspx?id=41984

KB2970228 https://www.microsoft .com/en-

us/download/details.aspx?id=44060

KB2984981 https://www.microsoft .com/en-

us/download/details.aspx?id=44482

Reboot Required

MS14-057

KB2972107

https://www.microsoft .com/en-

us/download/details.aspx?id=44320

MS14-053

KB2972216

https://www.microsoft .com/en-

us/download/details.aspx?id=44181

MS14-057

KB2979578

https://www.microsoft .com/en-

us/download/details.aspx?id=44322

MS15-041

KB3037581

https://www.microsoft .com/en-

us/download/details.aspx?id=46529

Reboot Required

Page 26: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

26 26 September 2017

INW Server Acquisition - Mac-Lab IT/XT/XTi ,

CardioLab IT/XT/XTi and SpecialsLab

GE Client Review Workstation Virtual Review

KB2994023 https://www.microsoft .com/en-

us/download/details.aspx?id=44451

KB3008627 https://www.microsoft .com/en-

us/download/details.aspx?id=44850

KB3020369 https://www.microsoft .com/en-

us/download/details.aspx?id=46828

KB3045645 https://www.microsoft .com/en-

us/download/details.aspx?id=46806

MS14-025

KB2928120

Domain

Controller Only

https://www.microsoft .com/en-

us/download/details.aspx?id=42683

Reboot Required

KB2577795 https://support .microsoft .com/en-

us/kb/2577795

MLCL V6.9.6 Security Updates

The following patches bring the MLCL system to a more recent patch level and address several security vulnerabilities. The following guidelines apply:

1) The above patches are required patches for 6.9.6 and must be applied first . 2) It is expected that some patches listed will already be on the system. 3) Pay attention to the Notes section for special handling instructions 4) Patches must be applied in order except where indicated. 5) Reboots are only required where indicated. If a Patch requests a reboot at another point , the system can be rebooted but it is not required. 6) Patches will not install if the software component to be patched is not present (such as an IE8 patch on a system that does not have IE8 installed).

Page 27: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

27 26 September 2017

Note: KB4022719 replaces KB4012215 and KB4019263 for both Windows 7 and Windows Server 2008 R2 to address CVE-2017-8543, CVE-2017-8544, CVE-2017- 0277, CVE-2017-0276, CVE-2017-0275, CVE-2017-0274, CVE-2017-0272, CVE-2017-0271, CVE-2017-0270, CVE-2017-0269, CVE-2017-0268, CVE-2017-0171, CVE- 2017-0280, CVE-2017-0279 and CVE-2017-0278.

Windows 7 (Acquisition, Review and Virtual Review) KB Link Notes

Make the following Registry Change

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing]

State=dword:00023c00

KB2901907

https://www.microsoft.com/en-us/download/details.aspx?id=42642 Right click and Run as Administrator

Subsequent patches depend on installation of KB2901907.

KB2979596

https://www.microsoft.com/en-us/download/details.aspx?id=44278 Only perform this on 6.9.6R1 Systems. Run from cmd prompt with SQLServer2008SP4-KB2979596- x86-ENU.exe /ACTION=Patch /INSTANCENAME=MSSQLSERVER /IGNORESERVICERESTARTSTATE

KB3020369

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=f00e3c36-f5e3-465c-95d2- a84a22425868

KB3138612

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=0bae11c4-626f-4b7e-b539- 06c95cb014d5

Page 28: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

28 26 September 2017

KB2639308

https://www.microsoft.com/en-us/download/details.aspx?id=28929

Install only .MSU file

IE11

http://download.microsoft.com/download/9/2/F/92FC119C-3BCD-476C-B425-038A39625558/IE11-Windows6.1-x86- en-us.exe

Right click and Run as Administrator. If installation fail with a message requesting to connect to Internet, then install from the command line with these parameter /quiet /closeprogra

ms e.g. "IE11-Windows6.1-x86- en-us.exe /quiet /closeprograms"

Note: It could take few retry attempts to install.

Reboot Required

KB3125574

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=7ed4c8c3-0f06-4227-99e3- e9f143394687

Reboot Required

KB3172605

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=8382aa41-9de1-4bb2-b8b0- 4ab89451be64

Adobe 11.0.19 http:/ /suppo rtdo wnlo ads.ado be.com/ detail.jsp? ftpID=6 12 3

KB3179573

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=fb159d73-16f1-4c8a-bc3a- c768f6e2a7ce

KB4022719

http://catalog.update.microsoft .com/v7/site/ScopedViewInline.aspx?updateid=b9815359-6aad-467e-8666- 2351fadc3c45

Page 29: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

29 26 September 2017

KB3205402

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=f8938e57-3bdd-411e-8bdd- 38ebbac1db50

Right Click and Run as Administrator; Apply KB3210139 and KB3210131 Only

Reboot Required

Patches below can be applied in any order

kb947318

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=ceff8ca0-08db-41d0-b825- fcc2cebaf8b4

Do not run on Review Systems

KB3192391

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=bc4fc430-38b5-4ef5-ba85- fb8254ac9be9

KB2538242

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=bb49cc19-8847-4986-aa93- 5e905421e55a

Install 2 files with x86 in title

KB2538243

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=729a0dcb-df9e-4d02-b603- ed1aee074428

Install 2 files with x86 in title; Select Repair option if required

KB2565063

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=719584bc-2208-4bc9-a650- d3d6347eb32e

Install 2 files with x86 in title; Select Repair option if required

KB2863902

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=73ab9cea-fa20-4d92-9719- f01f13f613c1

KB2863926

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=df24debf-341b-403b-9e0a- 6cd01a025d8d

KB2920748

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=7ac78292-3a54-4100-837e- 140fa85bb0bc

KB2863817

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=d0ab24c4-9edf-4faa-a69b- 078470f6fd40

Use all-convintl-en-us_......cab

Page 30: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

30 26 September 2017

KB3104002

https://www.microsoft.com/en-us/download/details.aspx?id=50346

KB3085528

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=d7ba6a6e-7884-4042-a2ce- f236c43a0989

KB2881029

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=3b158fbc-892b-4d1b-8c02- 91682088ad72

kb2553432

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=9badf612-4854-4023-9867- 76e3677311af

kb3118390

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=4ecc22c5-46d4-40b2-a640- 60e9da447657

kb3118378

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=ae54ce3d-e321-4831-a1ba- fcae8eb430a0

kb3127953

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=95499009-678d-4bc4-96d9- 384781a18627

KB3161949

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=25c0fd19-d4e4-4af5-aad9- f308dde496d5

KB2900986

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=82b62134-bafb-4fd3-815e- 73534b9d1aa5

kb2850016

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=3188a7d3-91d0-4780-897f- 1990c4b3e952

KB3031432

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=2ca8e6e8-fc4a-4974-a208- 18cdf1d01d86

Apply kb3004375 and KB3031432

KB3059317

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=9202ee09-24c9-4ae7-83bd- 3b5d4b0e5c22

kb3101521

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=52d30a1b-2f14-4463-9034- 92f46b76576d

Page 31: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

31 26 September 2017

kb2965313

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=a4474e45-3c37-4708-9a5a- 31e3538ddd44

Use all-wordintl-en-us_......cab

KB3156016

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=f21d3be8-dd35-4ac7-97b8- b4d06d4ed7f2

KB3156019

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=b5b7f2e4-bf3f-4974-ab23- f3a2ab886d31

KB3156017

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=3f6acb0e-47be-458e-8559- ab9f1179dfba

KB3159398

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=2329e2b7-4e31-42e3-86aa- 2ebfaa2c6339

KB3161958

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=0fda0cfc-7ca1-4f78-ae19- 90977c948ed3

KB3170455

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=65b4f1cb-3cd4-4546-8896- dc462d484282

KB3177186

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=88aaa062-4a7b-4690-ac06- 8527d3db830d

KB3125869

https:/ /suppo rt.m icro so ft.co m/en -us/ help/3 12 58 69 /m s15 -124 -v ulnerability-in-internet-explo rer-co uld-lead-to -aslr- by pass-decem ber-16 , -20 15

Download and install only the “Enable the User32 exception handler hardening feature in Internet Explorer”

KB2880971

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=fe5 94 d9 e -9 82 8 -4 51 f-aa56 - 2 c2cf43 1 ade3

KB2810073

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=20 c03 f3c -cf50 -44 69 -9e6 a - c4 f74 62 2a16 0

Only Run .MSP file

KB3000483

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=dbd9 1 e4 7 -4 23 8 -4 bbe -8c8 b- 8 7 c2 d02 c5 7 d2

Only Run 2 .MSU files

Page 32: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

32 26 September 2017

KB3054845

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=cd3 cb1c0 -dd4 1 -4 5 d0 -a60 d- 7 94 47 0 b8 37 61

kb3054848

ht tp://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=79 ebf15 b -3 343 -41 fb-bf8 8 - 9 bd6 b42 53 fc0

kb3054835

http: //catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=bd7 2 6abf-fa5 0 -4 89 d-ab30 - fa1 3 ee3e0 ba0

kb3054842

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=fc8 04 f6e -c55 7 -4 7e0 -9 f5e - 4 37 3 b2 86 67 7 d

KB3055044

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=58 45 4 b4 a -dd6 b-49 02 -86 5 b- c5 7ce21 d3 b9 1

KB2553313

htt p: //catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=f26 e191 1 -9 cf6 -4 08 2 -8 34 9 - 4 56 23 0 bc0 4ec

KB2598244

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=aaa348 20 -09 55 -45 db-b5 a6 - 3 04 8 bb56 84 3f

KB3055033

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=ef6 e2e39 -22 5f-4 cad-9 7 bb- 2 00 d1 fab3e53

KB2965310

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=fbe4 62 96 -97 4f-4eaf-ba1f- 3 f57 78 7e93 2 b

KB3055039

htt p: //catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=d5 db1 fcb -f98 a -4 b2 d-abbc - 0 03 32 74 25 62 8

kb3085560

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=6 f1 5 ec3 c -4 e2 7 -4 83 d-baed- 6 e17 fba8 ffc7

Use all-convintl-en-us_......cab

kb3085526

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=1c9 e7 d92 -d1 df-4 cc4 -89 06 - ff2 42 94 79 d19

kb3101544

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=5dddb0 e6 -6 f6 6 -4 ae0 -86 e3 - 6 a8 d3 d2 3a20 1

Page 33: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

33 26 September 2017

kb3101543

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=39 6 a0 e1 8 -0 1 af-4 f19 -a5ea - c5 c9 e352 32 1 f

kb3085594

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=74 ccaa37 -b9c6 -4 c4c -a65 b- da8 3 e3 e6 34 1a

kb2817478

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=b1 bbd0 2 b -d4 c3 -48 c3 -b64 8 - 1 85 2 de5 d2c8 e

kb3101520

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=1e5 f047 6 -1 14 8 -4 3 b8 -bfc4 - 1 0 a1 a29 ddc32

kb3054984

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=35 c6 b5 dc -c065 -4 d9 a -a71 f- 9 d0 a6 beb4df9

kb3115123

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=e8 bd0 02 7 -3 68 c -4 ecf-bc9 b- 5 c64 19 5e2c53

kb3114400

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=98 01 5 a1 2 -b9 cd-48 ab-bd7 f- 7 dea92 bb8 f6 7

Use all-convintl-en-us_......cab

kb3114869

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=7efaa3ba -dee4 -45 ba-84 b0 - 50 c7 aa1 04 37 b

kb3114885

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=4ca0 7 bc3 -8 c95 -46 44 -be17 - 0 40 a39 64 a02 a

use all-onenoteint-en-us_....cab

kb3115474

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=8bc2 bfec -8 4 bb-48 8e -ae9 1 - f4 81 4 d4 09 dba

use all-outlookintl-en-us_.....cab

kb3115471

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=fd8 a17 d9 -dad0 -4 f8 d-9 5 c4 - 0 67 7 ca0 fbb08

kb3118309

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=fb0 0 cc2 8 -9 cb3 -43 7 e -bac5 - 0 69 bc32 f8 aeb

kb3128037

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=46 31 1 afb -a6 ab-4 fad-b6 aa- 4 ec9 75 07 beba

Page 34: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

34 26 September 2017

kb3118380

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=84 ea2 3 ce -49 d8 -4 68 4 -ac3 b- 4 5 f0 39 60 53 cf

kb3114395

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=df6 6 c1 c1 -7 fab-4 a4 3 -8 86 c - 5 20 3 d1 49 5 bd8

kb2889841

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=bb2 2 0 b3 0 -6 d01 -4e57 -8 db6 - 3 e492 d6 b65 d3

kb3128034

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=9cd724 46 -5 c11 -43 3 a -9 58 9 - fd8 5 afcc4 eb0

KB3178687

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=72 6 adfc6 -4 ac9 -4 40 9 -bdab- 2 89 2 b7 05 8e78

Reboot Required

KB3045311

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=2 fd5 1 fbf-3f70 -4 c8 5 -9 86 b- 5 65 3 b0 fb7 f11

Only run x86 file; Run from a cmd prompt as Administrator using the following command: AMD64_X86- all-sqlserver2008-kb3045311- x86_30561aef89c6d174fee7b77b ed6b3b8539542558.exe /ACTION=Patch /INSTANCENAME=MSSQLSERVER /IGNORESERVICERESTARTSTATE

Reboot Required

Make the Following Registry Change

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing]

State=dword:00010000

Page 35: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

35 26 September 2017

Windows 7 (6.9.6 R1 GECW Review)

Link Notes

https://downloadcenter.intel.com/download/22165/Intel-Graphics-Media-Accelerator-Driver-Windows-7-Windows- Vista-exe-

Display adapter driver update Win7Vista_151719.exe

Windows 2008R2 (INW)

KB Link

Make the following Registry Change

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing]

Only perform this on 6.9.6R2 Systems

State=dword:00023c00 KB2979596

https://www.microsoft.com/en-us/download/details.aspx?id=44278 Only perform this on 6.9.6R1 Systems. Run from cmd prompt with SQLServer2008SP4-KB2979596- x64-ENU.exe /ACTION=Patch /INSTANCENAME=MSSQLSERVER /IGNORESERVICERESTARTSTATE

KB3020369

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=076f5c31-ea9c-41db-8640- 081a79c79602

KB3138612

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=5ae1092c-f211-4873-aabd- 9ee1a142acbb

Page 36: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

36 26 September 2017

KB2639308

http://www.microsoft.com/en-ph/download/details.aspx?id=28933

Install only .MSU file

IE11

http://download.microsoft.com/download/7/1/7/7179A150-F2D2-4502-9D70-4B59EA148EAA/IE11-Windows6.1- x64-en-us.exe

Right click and Run as Administrator. If installation fail with a message requesting to connect to Internet, then install from the command line with these parameter /quiet /closeprograms e.g. "IE11-

Windows6.1-x64-en-us.exe /quiet

/closeprograms"

Note: It could take few retry attempts to install.

Reboot Required

kb3125574

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=6147e6c1-663b-41bc-9582- 9579343857d9

Reboot Required

Adobe 11.0.19 http://suppo rtdownlo ads.ado be.com/ detail.jsp? ftpID =6 12 3

KB3172605

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=3363f98b-78a3-44a7-93df- d770b2dd150a

KB3179573

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=366304fa-105b-4f48-a07e- d2e6bb274533

KB4022719

http://catalog.update.microsoft .com/v7/site/ScopedViewInline.aspx?updateid=4aa2ed70-7c26-4727-bd11- 6a98b6dd622c

Page 37: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

37 26 September 2017

Reboot Required

Patches below can be applied in any order

kb2894844

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=00e0ded8-dc85-4017-8b54- a1456c63a61b

KB3205402

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=5036bd76-3251-49ba-ad86- a99b00853ad4

Only apply KB3210139 (Right click and run as Administrator) & KB3210131

KB2972216

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=e63b4eca-27a1-4fd0-b311- e468da0cd02e

KB2972107

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=151e15f7-fa7a-40c4-a58a- 721cb88e8071

KB2979578

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=d44bd7d1-ec33-4a65-942c- 093aec39b02b

KB2978128

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=e257d135-40b9-4361-9e7d- 8537d256d54b

KB3074230

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=d0baf87d-e8ec-4ddc-b8b0- 89f668ee6504

KB3074550

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=2f7719fa-8a6d-4b16-9c69- 66447f308ee7

KB3097996

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=103a0bdd-e71c-4f33-8cf1- 7b68198ad536

KB3098781

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=4ed6e065-7e37-44bb-8798- 245649851dec

Page 38: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

38 26 September 2017

KB3122656

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=428c2fef-afe5-46a7-a454- da2fa0e3af27

KB3127229

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=8f49f137-0741-498e-9f7c- 754862054221

KB3135996

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=24aeb988-b368-435b-923b- c09b8a2d3fa5

KB3156017

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=7a300bcb-8e8a-4e38-a04d- 9da62feda917

KB3142033

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=eac1599f-2887-40ce-9cf4- 0f364dc37343

KB3159398

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=56a7a134-5ad6-43c2-aab1- e10d2fef8f7c

KB3161949

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=5bc0e07b-33ca-4ea2-8253- 4f0dcd26783a

KB3170455

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=45460055-be25-47ad-ad0a- 2a4711fcca74

KB3163251

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=7b053e5b-04a5-4f47-92c5- 74f6caba0de7

KB3184471

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=8b314103-7382-4c65-8679- 135d24dc8966

KB3177186

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=04c3010d-9989-495c-ab1c- dbc011015822

KB3125869

https:/ /suppo rt.m icro so ft.co m/en -us/ help/3 12 58 69 /m s15 -124 -v ulnerability-in-internet-explo rer-co uld-lead-to -aslr- by pass-decem ber-16 , -20 15

KB2538243

http://catalo g.update.m icro so ft.com/ v7 /site/ Sco pedViewInline.aspx? updateid=72 9 a0 dcb -df9 e -4 d02 -b60 3 - ed1aee07 44 28

Only run X86-all-vcredist_x86….

Page 39: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

39 26 September 2017

KB3156016

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=de32fc3d-60a4-4fc9-9588- 0c404765940a

KB3156019

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=05cb4345-49ea-4eca-8ba3- f870466c46c7

KB3161958

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=795571cf-bd8d-4602-bb28- 11080e614333

HPSBMU0365

3 rev.1

https://h20566.www2.hpe.com/hpsc/swd/public/detail?swItemId=MTX_083799d6dad34195bb47cb43c1

Reboot Required

KB3045311

http://catalog.update.microsoft.com/v7/site/ScopedViewInline.aspx?updateid=2fd51fbf-3f70-4c85-986b- 5653b0fb7f11

Only run x64 file; Run from a cmd prompt as Administrator using the following command: AMD64-all-

sqlserver2008-kb3045311- x64_37a197c60990d2e83e98d109 0109a4ab3f2abe4b.exe /ACTION=Patch /INSTANCENAME=MSSQLSERVER /IGNORESERVICERESTARTSTATE

Reboot Required

Make the following Registry Change

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing]

Only perform this on 6.9.6R2 Systems

State=dword:00010000

Page 40: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

40 26 September 2017

MLCL v6.9.6 Optional Security Updates

The following optional updates may be applied to further enhance the security profile of the MLCL systems. These updates should be evaluated on a site-by-site basis in

accordance with local IT policy. The configuration changes in this section are compatible with MLCL product functionality but may introduce site specific IT impact as a result

of disabling of legacy SSL protocols, prohibiting remote desktop usage and requiring certificate generation and maintenance.

INW Server Acquisition - Mac-Lab IT/XT/XTi ,

CardioLab IT/XT/XTi and SpecialsLab

GE Client Review Workstation Virtual Review

Patch Download URL Download URL Download URL Download URL

MS16-047

KB3149090

https://technet.microsoft.com/librar y/security/MS16-047

https://technet.microsoft.com/librar y/security/MS16-047

https://technet.microsoft.com/librar y/security/MS16-047

https://technet.microsoft.com/librar y/security/MS16-047

Plugin 20007 –

Disable SSL

V2/V3 –

KB187498

Please see section - How to Install Plugin 20007 – Disable SSL V2/V3 – KB187498

Please see section - How to Install

Plugin 20007 – Disable SSL V2/V3 –

KB187498

Please see section - How to Install

Plugin 20007 – Disable SSL V2/V3 –

KB187498

Please see section - How to Install Plugin 20007 – Disable SSL V2/V3 – KB187498

Plugin 78479 -

Poodle

No change needed. Step above fixes this.

No change needed. Step above fixes this.

No change needed. Step above fixes this.

No change needed. Step above fixes this.

Plugin 35291 –

Weak Hashing

Please see section - How to Install Plugin 35291 – Weak Hashing

(Refer to

https://technet.microsoft.com/en- us/library/ms191192(v=sql.105).aspx

for more information)

Please see section - How to Install Plugin 35291 – Weak Hashing

(Refer to

https://technet.microsoft.com/en- us/library/ms191192(v=sql.105).aspx

for more information)

Please see section - How to Install Plugin 35291 – Weak Hashing

(Refer to

https://technet.microsoft.com/en- us/library/ms191192(v=sql.105).aspx

for more information)

Please see section - How to Install Plugin 35291 – Weak Hashing

(Refer to

https://technet.microsoft.com/en- us/library/ms191192(v=sql.105).aspx

for more information)

Plugin 45411 No change needed. Step above fixes this.

No change needed. Step above fixes this.

No change needed. Step above fixes this.

No change needed. Step above fixes this.

Page 41: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

41 26 September 2017

Plugin 65821 –

SSL RC4 Cipher

Suites

Supported (Bar

Mitzvah)

Please see section - How to Install Plugin 65821 – SSL RC4 Cipher Suites Supported (Bar Mitzvah)

Please see section - How to Install

Plugin 65821 – SSL RC4 Cipher Suites

Supported (Bar Mitzvah)

Please see section - How to Install

Plugin 65821 – SSL RC4 Cipher Suites

Supported (Bar Mitzvah)

Please see section - How to Install Plugin 65821 – SSL RC4 Cipher Suites Supported (Bar Mitzvah)

INW Server Acquisition - Mac-Lab IT/XT/XTi ,

CardioLab IT/XT/XTi and SpecialsLab

GE Client Review Workstation Virtual Review

Plugin 63155 -

Microsoft

Windows

Unquoted

Service Path

Enumeration

Please see section - How Remove Vulnerability for Plugin 63155 – Microsoft Windows Unquoted Service Path Enumeration

Please see section - How Remove

Vulnerability for Plugin 63155 –

Microsoft Windows Unquoted Service

Path Enumeration

Please see section - How Remove

Vulnerability for Plugin 63155 –

Microsoft Windows Unquoted Service

Path Enumeration

Please see section - How Remove

Vulnerability for Plugin 63155 –

Microsoft Windows Unquoted Service

Path Enumeration

Plugin 59915 –

Vulnerabilities

in Gadgets

Could Allow

Remote Code

Execution

N/A Please follow the section titled “Disable

the Sidebar in the system Registry” in

the following Article:

https://technet .microsoft .com/library/s

ecurity/2719662

Please follow the section titled “Disable

the Sidebar in the system Registry” in

the following Article:

https://technet .microsoft .com/library/s

ecurity/2719662

Please follow the section titled “Disable

the Sidebar in the system Registry” in

the following Article:

https://technet.microsoft.com/library/s

ecurity/2719662

Page 42: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

42 26 September 2017

MLCL v6.9.5

INW Server GE Hardware Acq/Review Software Only System (XP) Software Only System (Win7)

Operating

System

Platform

Windows Server 2008 R2 SP1 Windows XP SP3 Windows XP SP3 Windows 7 SP1

Current

Unqualified

Vulnerability

MS16-077: Security Update for WPAD

(KB 3165191)

HPSBMU03593

KB4025337(CVE-2017-8589, CVE-2017-8582, CVE-2017-8565, CVE-2017-8563, CVE-2017-8495, CVE-2017-8486)

KB4034679(CVE-2017-8620, CVE-2017-

0174, CVE-2017-8633)

KB4038779(CVE-2017-0161)

N/A N/A MS16-077: Security Update for WPAD

(KB 3165191)

KB4025337(CVE-2017-8589, CVE-2017-

8582, CVE-2017-8565, CVE-2017-8563,

CVE-2017-8495, CVE-2017-8486)

KB4034679(CVE-2017-8620, CVE-2017-

0174, CVE-2017-8633)

KB4038779(CVE-2017-0161)

Security Patch

MS14-031

KB2957189

http://www.microsoft .com/en-

us/download/details.aspx?id=43143

N/A N/A http://www.microsoft .com/en-

us/download/details.aspx?id=43147

MS15-127

KB3100465

(Domain

Controller only)

https://www.microsoft.com/en- us/download/details.aspx?id=50127

N/A N/A N/A

Page 43: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

43 26 September 2017

HP System

Management

Homepage

HPSBMU03380

Version:

7.5.4.3(1 Apr

2016)

https://h20566.www2.hpe.com/hpsc/s wd/public/detail?idx=&action=driverDo cument&itemLocale=&swItemId=MTX_ 544617581c264c8eaafe6b273a&mode

Please see section - How to Install HP System Management Homepage Patch on the INW Server – HPSBMU03380

NOTE: HPSBMU03051 must be installed

before HPSBMU03380.

N/A N/A N/A

MS15-034

KB3042553

https://www.microsoft.com/en- us/download/details.aspx?id=46480

N/A N/A https://www.microsoft.com/en- us/download/details.aspx?id=46501

MS14-068

KB3011780

https://www.microsoft.com/en- us/download/details.aspx?id=44966

N/A N/A N/A

INW Server GE Hardware Acq/Review Software Only System (XP) Software Only System (Win7)

MS14-066

KB2992611

https://www.microsoft.com/en- us/download/details.aspx?id=44618

MS14-066 KB2992611* MS14-066 KB2992611* https://www.microsoft .com/en-

us/download/details.aspx?id=44633

HP System

Management

Homepage

HPSBMU03051

Version:

7.3.3.1(19 Jun

2014)

http://h20564.www2.hpe.com/hpsc/sw

d/public/detail?swItemId=MTX_e8076c

2a35804685ad65b2b1ba

Please see section - How to Install HP

System Management Homepage Patch

on the INW Server – HPSBMU03051

N/A N/A N/A

MS14-016

KB2923392

(Domain

Controller Only)

http://www.microsoft .com/en-

us/download/details.aspx?id=42099

N/A N/A N/A

MS13-081

KB2884256

http://www.microsoft .com/en-

in/download/details.aspx?id=40379

http://www.microsoft .com/en-

us/download/details.aspx?id=40438

http://www.microsoft .com/en-

us/download/details.aspx?id=40438

http://www.microsoft .com/en-

in/download/details.aspx?id=40407

Page 44: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

44 26 September 2017

MS13-081

KB2868038

http://www.microsoft .com/en-

in/download/details.aspx?id=40526

http://www.microsoft .com/en-

us/download/details.aspx?id=40497

http://www.microsoft .com/en-

us/download/details.aspx?id=40497

http://www.microsoft .com/en-

in/download/details.aspx?id=40395

MS13-081

KB2864202

http://www.microsoft .com/en-

in/download/details.aspx?id=40404

N/A N/A http://www.microsoft .com/en-

in/download/details.aspx?id=40601

MS13-081

KB2862335

http://www.microsoft .com/en-

in/download/details.aspx?id=40590

http://www.microsoft .com/en-

us/download/details.aspx?id=40426

http://www.microsoft .com/en-

us/download/details.aspx?id=40426

http://www.microsoft .com/en-

in/download/details.aspx?id=40409

MS13-081

KB2862330

http://www.microsoft .com/en-

in/download/details.aspx?id=40372

http://www.microsoft .com/en-

us/download/details.aspx?id=40474

http://www.microsoft .com/en-

us/download/details.aspx?id=40474

http://www.microsoft .com/en-

in/download/details.aspx?id=40507

MS13-079

KB2853587

(Domain

Controller Only)

http://www.microsoft .com/en-

in/download/details.aspx?id=40025

N/A N/A N/A

MS13-065

KB2868623

http://www.microsoft .com/en-

in/download/details.aspx?id=39885

N/A N/A http://www.microsoft .com/en-

us/download/details.aspx?id=39809

MS13-062

KB2849470

http://www.microsoft .com/en-

in/download/details.aspx?id=39899

http://www.microsoft .com/en-

in/download/details.aspx?id=39825

http://www.microsoft .com/en-

in/download/details.aspx?id=39825

http://www.microsoft .com/en-

us/download/details.aspx?id=39890

INW Server GE Hardware Acq/Review Software Only System (XP) Software Only System (Win7)

MS13-049

KB2845690

http://www.microsoft .com/en-

in/download/details.aspx?id=39221

N/A N/A http://www.microsoft .com/en-

us/download/details.aspx?id=39217

MS13-018

KB2790655

http://www.microsoft .com/en-

in/download/details.aspx?id=36651

N/A N/A http://www.microsoft .com/en-

in/download/details.aspx?id=36694

MS13-001

KB2769369

http://www.microsoft .com/en-

in/download/details.aspx?id=36336

N/A N/A http://www.microsoft .com/en-

in/download/details.aspx?id=36274

* Microsoft XP SP3 Extended Support Patch – Only available to U.S. PSC contract or warranty customers. Contact GE Field Engineer for availability details.

Page 45: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

45 26 September 2017

MLCL v6.9.5 Security Updates

The following patches bring the MLCL system to a more recent patch level and address several security vulnerabilities. The following guidelines apply:

1) The above patches are required patches for 6.9.5 and must be applied first . 2) It is expected that some patches listed will already be on the system. 3) Patches must be applied in order except where indicated. 4) Reboots are only required where indicated. If a Patch requests a reboot at another point , the system can be rebooted but it is not required. 5) Patches will not install if the software component to be patched is not present (such as an IE8 patch on a system that does not have IE8 installed).

INW Server GE Hardware Acq/Review Software Only System (XP) Software Only System (Win7)

Operating

System

Platform

Windows Server 2008 R2 SP1 Windows XP SP3 Windows XP SP3 Windows 7 SP1

Security Patch

MS17-010

KB4012598

N/A http://catalog.update.microsoft .com/v7

/site/ScopedViewInline.aspx?updateid=

9e189800-f354-4dc8-8170-

7bd0ad7ca09a

http://catalog.update.microsoft .com/v7

/site/ScopedViewInline.aspx?updateid=

9e189800-f354-4dc8-8170-

7bd0ad7ca09a

N/A

MS17-013

KB4012583

N/A https://www.microsoft .com/en-

us/download/details.aspx?id=55460

https://www.microsoft .com/en-

us/download/details.aspx?id=55460

N/A

CVE-2017-0176

KB4022747

N/A https://www.microsoft .com/en-

us/download/details.aspx?id=55465

https://www.microsoft .com/en-

us/download/details.aspx?id=55465

N/A

Page 46: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

46 26 September 2017

CVE-2017-0222

IE8

KB4018271

N/A https://www.microsoft .com/en-

us/download/details.aspx?id=55474

https://www.microsoft .com/en-

us/download/details.aspx?id=55474

N/A

INW Server GE Hardware Acq/Review Software Only System (XP) Software Only System (Win7)

CVE-2017-0267

to 0280

KB4018466

N/A https://www.microsoft .com/en-

us/download/details.aspx?id=55437

https://www.microsoft .com/en-

us/download/details.aspx?id=55437

N/A

CVE-2017-7269

KB3197835

N/A https://www.microsoft .com/en-

us/download/details.aspx?id=55425

https://www.microsoft .com/en-

us/download/details.aspx?id=55425

N/A

CVE-2017-8461

KB4024323

N/A https://www.microsoft .com/en-

us/download/details.aspx?id=55429

https://www.microsoft .com/en-

us/download/details.aspx?id=55429

N/A

CVE-2017-8487

KB4025218

N/A https://www.microsoft .com/en-

us/download/details.aspx?id=55469

https://www.microsoft .com/en-

us/download/details.aspx?id=55469

N/A

CVE-2017-8543

KB4024402

N/A https://www.microsoft .com/en-

us/download/details.aspx?id=55439

https://www.microsoft .com/en-

us/download/details.aspx?id=55439

N/A

CVE-2017-8552

KB4019204

N/A https://www.microsoft .com/en-

us/download/details.aspx?id=55452

https://www.microsoft .com/en-

us/download/details.aspx?id=55452

N/A

Page 47: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

47 26 September 2017

KB3020369 https://www.microsoft .com/en-

us/download/details.aspx?id=46828

N/A N/A http://catalog.update.microsoft .com/v7

/site/ScopedViewInline.aspx?updateid=

f00e3c36-f5e3-465c-95d2-

a84a22425868

INW Server GE Hardware Acq/Review Software Only System (XP) Software Only System (Win7)

KB3125574

Convenience

Rollup

http://catalog.update.microsoft .com/v7 /site/ScopedViewInline.aspx?updateid= 6147e6c1-663b-41bc-9582- 9579343857d9

N/A N/A http://catalog.update.microsoft .com/v7

/site/ScopedViewInline.aspx?updateid=

7ed4c8c3-0f06-4227-99e3-

e9f143394687

Reboot

following

convenience

rollup

Reboot Required

N/A N/A

Reboot Required

KB4022719

June 2017

Monthly Rollup

http://catalog.update.microsoft .com/v7 /site/ScopedViewInline.aspx?updateid= 4aa2ed70-7c26-4727-bd11- 6a98b6dd622c

N/A N/A http://catalog.update.microsoft .com/v7

/site/ScopedViewInline.aspx?updateid=

b9815359-6aad-467e-8666-

2351fadc3c45

Reboot

Reboot Required

Reboot Required

Reboot Required

Reboot Required

Page 48: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

48 26 September 2017

MLCL v6.9.5 Firmware

HPSBPI02938 Pre-9/23/2013 Firmware

•HP CP2025N printer

http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay =w

srp-navigationalState%3DdocId%253Demr_na-c04041432-

2%257CdocLocale%253D%257CcalledBy%253D&javax.portlet .begCacheTok=com.vignette.cachetoken&javax.portlet .endCacheTok=com.v

ignette.cachetoken

HPSBPI02938 Pre-9/23/2013 Firmware

•HP LaserJet Pro 400 Printer M401

http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay =w

srp-navigationalState%3DdocId%253Demr_na-c04041432-

2%257CdocLocale%253D%257CcalledBy%253D&javax.portlet .begCacheTok=com.vignette.cachetoken&javax.portlet .endCacheTok=com.v

ignette.cachetoken

HPSBPI02938 Pre-9/23/2013 Firmware

•HP LaserJet Pro 400 color Printer M451

http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay =w

srp-navigationalState%3DdocId%253Demr_na-c04041432-

2%257CdocLocale%253D%257CcalledBy%253D&javax.portlet .begCacheTok=com.vignette.cachetoken&javax.portlet .endCacheTok=com.v

ignette.cachetoken

HPSBPI02938 Pre-9/23/2013 Firmware

•HP LaserJet P2035N

N/A

HPSBPI02938 Pre-9/23/2013 Firmware

•HP LaserJet 2300

N/A

RICOH SP4100N N/A

RICOH AP410N N/A

RICOH CL3500N N/A

RICOH CL3000 N/A

Page 49: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

49 26 September 2017

MLCL v6.9

INW Server GE Hardware Acq/Review Software Only System (XP) Software Only System (Win7)

Operating

System

Platform

Windows Server 2008 R2 SP1 Windows XP SP3 Windows XP SP3 Windows 7 SP1

Current

Unqualified

Vulnerability

MS16-077: Security Update for WPAD

(KB 3165191),

HPSBMU03593

KB4025337(CVE-2017-8589, CVE-2017-8582, CVE-2017-8565, CVE-2017-8563, CVE-2017-8495, CVE-2017-8486)

KB4034679(CVE-2017-8620, CVE-2017-

0174, CVE-2017-8633)

KB4038779(CVE-2017-0161)

N/A N/A MS16-077: Security Update for WPAD

(KB 3165191)

KB4025337(CVE-2017-8589, CVE-2017-

8582, CVE-2017-8565, CVE-2017-8563,

CVE-2017-8495, CVE-2017-8486)

KB4034679(CVE-2017-8620, CVE-2017-

0174, CVE-2017-8633)

KB4038779(CVE-2017-0161)

Security Patch

MS15-127

KB3100465

(Domain

Controller only)

https://www.microsoft.com/en- us/download/details.aspx?id=50127

N/A N/A N/A

Page 50: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

50 26 September 2017

HP System

Management

Homepage

HPSBMU03380

Version:

7.5.4.3(1 Apr

2016)

https://h20566.www2.hpe.com/hpsc/s wd/public/detail?idx=&action=driverDo cument&itemLocale=&swItemId=MTX_ 544617581c264c8eaafe6b273a&mode

Please see section - How to Install HP System Management Homepage Patch on the INW Server – HPSBMU03380

NOTE HPSBMU03051 must be installed

before HPSBMU03380.

N/A N/A N/A

Windows

Server 2008 R2

SP1 KB976932

Pre-Installation Requirement - Turn On Windows Update Service Configuration instruction section.

http://www.microsoft.com/en- us/download/details.aspx?id=5842

Post-Installation Requirement - Turn Off Windows Update Service

N/A N/A N/A

INW Server GE Hardware Acq/Review Software Only System (XP) Software Only System (Win7)

Configuration instruction section.

2007 Microsoft

Office Suite

SP3 KB2526086

N/A http://www.microsoft.com/en- us/download/details.aspx?id=27838

http://www.microsoft.com/en- us/download/details.aspx?id=27838

N/A

Service Pack 3

for Office

Language Pack

2007

KB2526086

N/A http://www.microsoft.com/en- us/download/details.aspx?id=27829

http://www.microsoft.com/en- us/download/details.aspx?id=27829

N/A

Page 51: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

51 26 September 2017

MS15-034

KB3042553

https://www.microsoft.com/en- us/download/details.aspx?id=46480

N/A N/A https://www.microsoft.com/en- us/download/details.aspx?id=46501

MS14-068

KB3011780

https://www.microsoft.com/en- us/download/details.aspx?id=44966

N/A N/A N/A

MS14-066

KB2992611

https://www.microsoft.com/en- us/download/details.aspx?id=44618

MS14-066 KB2992611* MS14-066 KB2992611* https://www.microsoft.com/en- us/download/details.aspx?id=44633

MS14-031

KB2957189

https://www.microsoft.com/en- us/download/details.aspx?id=43143

N/A N/A http://www.microsoft .com/en-

us/download/details.aspx?id=43147

HP System

Management

Homepage

HPSBMU03051

Version:

7.3.3.1(19 Jun

2014)

http://h20564.www2.hpe.com/hpsc/sw

d/public/detail?swItemId=MTX_e8076c

2a35804685ad65b2b1ba

Please see section - How to Install HP

System Management Homepage Patch

on the INW Server – HPSBMU03051

N/A N/A N/A

MS14-016

KB2923392

(Domain

Controller only)

http://www.microsoft.com/en- us/download/details.aspx?id=42099

N/A N/A N/A

MS13-081 http://www.microsoft.com/en- http://www.microsoft.com/en- http://www.microsoft.com/en- http://www.microsoft.com/en-

INW Server GE Hardware Acq/Review Software Only System (XP) Software Only System (Win7)

KB2884256 us/download/details.aspx?id=40379 us/download/details.aspx?id=40438 us/download/details.aspx?id=40438 us/download/details.aspx?id=40407

MS13-081

KB2868038

http://www.microsoft.com/en- us/download/details.aspx?id=40526

http://www.microsoft.com/en- us/download/details.aspx?id=40497

http://www.microsoft.com/en- us/download/details.aspx?id=40497

http://www.microsoft.com/en- us/download/details.aspx?id=40395

MS13-081

KB2864202

http://www.microsoft.com/en- us/download/details.aspx?id=40404

N/A N/A http://www.microsoft.com/en- us/download/details.aspx?id=40601

Page 52: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

52 26 September 2017

MS13-081

KB2862335

http://www.microsoft.com/en- us/download/details.aspx?id=40590

http://www.microsoft.com/en- us/download/details.aspx?id=40426

http://www.microsoft.com/en- us/download/details.aspx?id=40426

http://www.microsoft.com/en- us/download/details.aspx?id=40409

MS13-081

KB2862330

http://www.microsoft.com/en- us/download/details.aspx?id=40372

http://www.microsoft.com/en- us/download/details.aspx?id=40474

http://www.microsoft.com/en- us/download/details.aspx?id=40474

http://www.microsoft.com/en- us/download/details.aspx?id=40507

MS13-079

KB2853587

(Domain

Controller only)

http://www.microsoft.com/en- us/download/details.aspx?id=40025

N/A N/A N/A

MS13-065

KB2868623

http://www.microsoft.com/en- us/download/details.aspx?id=39885

N/A N/A http://www.microsoft.com/en- us/download/details.aspx?id=39809

MS13-062

KB2849470

http://www.microsoft.com/en- us/download/details.aspx?id=39899

http://www.microsoft.com/en- us/download/details.aspx?id=39825

http://www.microsoft.com/en- us/download/details.aspx?id=39825

http://www.microsoft.com/en- us/download/details.aspx?id=39890

MS13-049

KB2845690

http://www.microsoft.com/en- us/download/details.aspx?id=39221

N/A N/A http://www.microsoft.com/en- us/download/details.aspx?id=39217

MS13-018

KB2790655

http://www.microsoft.com/en- us/download/details.aspx?id=36651

N/A N/A http://www.microsoft.com/en- us/download/details.aspx?id=36694

INW Server GE Hardware Acq/Review Software Only System (XP) Software Only System (Win7)

MS13-001

KB2769369

http://www.microsoft.com/en- us/download/details.aspx?id=36336

N/A N/A http://www.microsoft.com/en- us/download/details.aspx?id=36274

MS12-054

KB2705219

http://www.microsoft .com/en-

us/download/details.aspx?id=30492

http://www.microsoft .com/en-

us/download/details.aspx?id=30497

http://www.microsoft .com/en-

us/download/details.aspx?id=30497

http://www.microsoft .com/en-

us/download/details.aspx?id=30547

Ms12-054

KB2712808

http://www.microsoft .com/en-

us/download/details.aspx?id=30555

http://www.microsoft .com/en-

us/download/details.aspx?id=30529

http://www.microsoft .com/en-

us/download/details.aspx?id=30529

http://www.microsoft .com/en-

us/download/details.aspx?id=30535

Page 53: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

53 26 September 2017

MS12-053

KB2723135

N/A http://www.microsoft .com/en-

us/download/details.aspx?id=30590

http://www.microsoft .com/en-

us/download/details.aspx?id=30590

N/A

MS12-036

KB2685939

http://www.microsoft.com/en- us/download/details.aspx?id=30021

http://www.microsoft .com/en-

us/download/details.aspx?id=30022

http://www.microsoft .com/en-

us/download/details.aspx?id=30022

http://www.microsoft .com/en-

us/download/details.aspx?id=30087

MS12-020

KB2621440

http://www.microsoft.com/en- us/download/details.aspx?displaylan g=en&id=29116

http://www.microsoft.com/download/e n/details.aspx?displaylang=en&id=29 125

http://www.microsoft.com/download/e n/details.aspx?displaylang=en&id=29 125

http://www.microsoft .com/download/e

n/details.aspx?displaylang=en&id=291

32

MS12-020

KB2667402

http://www.microsoft.com/en- us/download/details.aspx?displaylan g=en&id=29169

N/A N/A http://www.microsoft .com/en-

us/download/details.aspx?displaylang=

en&id=29145

MS12-017

KB2647170

(Domain

Controller Only)

http://www.microsoft.com/en- us/download/details.aspx?displaylan g=en&id=29164

N/A N/A N/A

MS12-005

KB2584146

http://www.microsoft.com/download/e n/details.aspx?displaylang=en&id=28 620

http://www.microsoft.com/download/e

n/details.aspx?displaylang=en&id=28

608

http://www.microsoft.com/download/e

n/details.aspx?displaylang=en&id=28

608

http://www.microsoft.com/download/e

n/details.aspx?displaylang=en&id=28

597

MS12-004

KB2598479

N/A http://www.microsoft .com/download/e

n/details.aspx?displaylang=en&id=286

38

http://www.microsoft .com/download/e

n/details.aspx?displaylang=en&id=286

38

N/A

INW Server GE Hardware Acq/Review Software Only System (XP) Software Only System (Win7)

MS12-004

KB2631813

http://www.microsoft.com/download/e

n/details.aspx?displaylang=en&id=28

617

http://www.microsoft.com/download/e

n/details.aspx?displaylang=en&id=28

638

http://www.microsoft.com/download/e n/details.aspx?displaylang=en&id=28 638

http://www.microsoft.com/en-

us/download/details.aspx?displaylan

g=en&id=28593

MS11-083

KB2588516

http://www.microsoft.com/download/e n/details.aspx?displaylang=en&id=27 894

N/A N/A http://www.microsoft.com/download/e n/details.aspx?displaylang=en&id=27 902

MS11-065

KB2570222

N/A http://www.microsoft.com/download/e n/details.aspx?displaylang=en&id=27 056

http://www.microsoft.com/download/e n/details.aspx?displaylang=en&id=27 056

N/A

Page 54: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

54 26 September 2017

MS11-064

KB2563894

http://www.microsoft.com/download/e n/details.aspx?displaylang=en&id=27 074

N/A N/A http://www.microsoft.com/download/e n/details.aspx?displaylang=en&id=27 052

MS11-063

KB2567680

http://www.microsoft.com/download/e n/details.aspx?displaylang=en&id=27 039

http://www.microsoft.com/download/e n/details.aspx?displaylang=en&id=27 008

http://www.microsoft.com/download/e n/details.aspx?displaylang=en&id=27 008

http://www.microsoft.com/download/e n/details.aspx?displaylang=en&id=27 025

MS11-062

KB2566454

N/A www.microsoft.com/downloads/detail s.aspx?familyid=6BC1F0AC-223D- 4B0B-86CD-2BA3863955C4

www.microsoft.com/downloads/detail s.aspx?familyid=6BC1F0AC-223D- 4B0B-86CD-2BA3863955C4

N/A

MS11-089

KB2596785 N/A http://www.microsoft .com/download/e

n/details.aspx?displaylang=en&id=285

12

http://www.microsoft .com/download/e

n/details.aspx?displaylang=en&id=285

12

http://www.microsoft .com/download/e

n/details.aspx?displaylang=en&id=285

12

MS11-058

KB2562485 (Domain

Controller only)

http://www.microsoft.com/en- us/download/details.aspx?id=27027

N/A N/A N/A

* Microsoft XP SP3 Extended Support Patch – Only available to U.S. PSC contract or warranty customers. Contact GE Field Engineer for availability details.

Page 55: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

55 26 September 2017

MLCL v6.9 Security Updates

The following patches bring the MLCL system to a more recent patch level and address several security vulnerabilities. The following guidelines apply:

1) The above patches are required patches for 6.9 and must be applied first . 2) It is expected that some patches listed will already be on the system. 3) Patches must be applied in order except where indicated. 4) Reboots are only required where indicated. If a Patch requests a reboot at another point , the system can be rebooted but it is not required. 5) Patches will not install if the software component to be patched is not present (such as an IE8 patch on a system that does not have IE8 installed).

INW Server GE Hardware Acq/Review Software Only System (XP) Software Only System (Win7)

Operating

System

Platform

Windows Server 2008 R2 SP1 Windows XP SP3 Windows XP SP3 Windows 7 SP1

Security Patch

MS17-010

KB4012598

N/A http://catalog.update.microsoft .com/v7

/site/ScopedViewInline.aspx?updateid=

9e189800-f354-4dc8-8170-

7bd0ad7ca09a

http://catalog.update.microsoft .com/v7

/site/ScopedViewInline.aspx?updateid=

9e189800-f354-4dc8-8170-

7bd0ad7ca09a

N/A

MS17-013

KB4012583

N/A https://www.microsoft .com/en-

us/download/details.aspx?id=55460

https://www.microsoft .com/en-

us/download/details.aspx?id=55460

N/A

CVE-2017-0176

KB4022747

N/A https://www.microsoft .com/en-

us/download/details.aspx?id=55465

https://www.microsoft .com/en-

us/download/details.aspx?id=55465

N/A

Page 56: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

56 26 September 2017

CVE-2017-0222

IE8

KB4018271

N/A https://www.microsoft .com/en-

us/download/details.aspx?id=55474

https://www.microsoft .com/en-

us/download/details.aspx?id=55474

N/A

INW Server GE Hardware Acq/Review Software Only System (XP) Software Only System (Win7)

CVE-2017-0267

to 0280

KB4018466

N/A https://www.microsoft .com/en-

us/download/details.aspx?id=55437

https://www.microsoft .com/en-

us/download/details.aspx?id=55437

N/A

CVE-2017-7269

KB3197835

N/A https://www.microsoft .com/en-

us/download/details.aspx?id=55425

https://www.microsoft .com/en-

us/download/details.aspx?id=55425

N/A

CVE-2017-8461

KB4024323

N/A https://www.microsoft .com/en-

us/download/details.aspx?id=55429

https://www.microsoft .com/en-

us/download/details.aspx?id=55429

N/A

CVE-2017-8487

KB4025218

N/A https://www.microsoft .com/en-

us/download/details.aspx?id=55469

https://www.microsoft .com/en-

us/download/details.aspx?id=55469

N/A

CVE-2017-8543

KB4024402

N/A https://www.microsoft .com/en-

us/download/details.aspx?id=55439

https://www.microsoft .com/en-

us/download/details.aspx?id=55439

N/A

CVE-2017-8552

KB4019204

N/A https://www.microsoft .com/en-

us/download/details.aspx?id=55452

https://www.microsoft .com/en-

us/download/details.aspx?id=55452

N/A

Page 57: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

57 26 September 2017

KB3020369 https://www.microsoft .com/en-

us/download/details.aspx?id=46828

N/A N/A http://catalog.update.microsoft .com/v7

/site/ScopedViewInline.aspx?updateid=

f00e3c36-f5e3-465c-95d2-

a84a22425868

INW Server GE Hardware Acq/Review Software Only System (XP) Software Only System (Win7)

KB3125574

Convenience

Rollup

http://catalog.update.microsoft .com/v7 /site/ScopedViewInline.aspx?updateid= 6147e6c1-663b-41bc-9582- 9579343857d9

N/A N/A http://catalog.update.microsoft .com/v7

/site/ScopedViewInline.aspx?updateid=

7ed4c8c3-0f06-4227-99e3-

e9f143394687

Reboot

following

convenience

rollup

Reboot Required

N/A N/A

Reboot Required

KB4022719

June 2017

Monthly Rollup

http://catalog.update.microsoft .com/v7 /site/ScopedViewInline.aspx?updateid= 4aa2ed70-7c26-4727-bd11- 6a98b6dd622c

N/A N/A http://catalog.update.microsoft .com/v7

/site/ScopedViewInline.aspx?updateid=

b9815359-6aad-467e-8666-

2351fadc3c45

Reboot

Reboot Required

Reboot Required

Reboot Required

Reboot Required

Page 58: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

58 26 September 2017

MLCL v6.9 Firmware

HPSBPI02938 Pre-9/23/2013 Firmware

•HP CP2025N printer

http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay =

wsrp-navigationalState%3DdocId%253Demr_na-c04041432-

2%257CdocLocale%253D%257CcalledBy%253D&javax.portlet .begCacheTok=com.vignette.cachetoken&javax.portlet .endCacheTok=com

.vignette.cachetoken

HPSBPI02938 Pre-9/23/2013 Firmware

•HP LaserJet Pro 400 Printer M401

http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay =

wsrp-navigationalState%3DdocId%253Demr_na-c04041432-

2%257CdocLocale%253D%257CcalledBy%253D&javax.portlet .begCacheTok=com.vignette.cachetoken&javax.portlet .endCacheTok=com

.vignette.cachetoken

HPSBPI02938 Pre-9/23/2013 Firmware

•HP LaserJet Pro 400 color Printer M451

http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay =

wsrp-navigationalState%3DdocId%253Demr_na-c04041432-

2%257CdocLocale%253D%257CcalledBy%253D&javax.portlet .begCacheTok=com.vignette.cachetoken&javax.portlet .endCacheTok=com

.vignette.cachetoken

HPSBPI02938 Pre-9/23/2013 Firmware

•HP LaserJet P2035N

N/A

HPSBPI02938 Pre-9/23/2013 Firmware

•HP LaserJet 2300

N/A

RICOH SP4100N N/A

RICOH AP410N N/A

RICOH CL3500N N/A

RICOH CL3000 N/A

Page 59: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

59 26 September 2017

DMS Security Patches

Product and Version Number Vulnerable Operating System Validated Critical Security Patches

Centricity Cardiology DMS Server (v.

2.x) (De-supported)

Windows NT 4.0 SP6A IE5.5

SP2

Centricity Cardiology DMS Server (v.

2.x & 3.x) (De-supported)

(3.x upgrades validated to Oracle

8.1.7.4.13)

IE7.0 not compatible with

Cyberpulse

Windows 2000 Server SP4 IE

5.5 SP2

Centricity Cardiology DMS Admin,

Interface and Application Server (v.

4.0) (De-supported)

Oracle 8.1.7.4.18 –Failed to

pass

IE7.0 not compatible with

Cyberpulse

Windows 2000 Server SP4 IE

6.0 SP1

Centricity Cardiology DMS Admin,

Interface and Application Server (v.

4.0x, 4.1.x, 4.2.x)

IE7.0 or IE8.0 not compatible

with Cyberpulse,

Windows 2003 Server SP2 –

IE 6.0 SP1

Q954430, Q973688, KB2564958, KB914961, KB2115168, KB2124261, KB2229593, KB2345886, KB2378111, KB2387149, KB2393802, KB2419635, KB2423089, KB2443105, KB2478960, KB2483185, KB2485663, KB2506212, KB2507938, KB2508429, KB2509553, KB2510587, KB2535512, KB2536276-v2,KB2544893-v2, KB2566454, KB2570947, KB2584146, KB2598479, KB2603381, KB2620712, KB2631813, KB2638806,

Page 60: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

60 26 September 2017

Product and Version Number Vulnerable Operating System Validated Critical Security Patches

Page 61: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

61 26 September 2017

KB2644615, KB2653956, KB2655992, KB2659262, KB2676562, KB2685939, KB2686509, KB2691442, KB2698365, KB2705219-v2, KB2712808, KB2727528, KB2742604, KB2748349, KB2749655, KB2770660, KB2779562, KB2780091, KB2803821-v2, KB2807986, KB2820917, KB2834886, KB2847311, KB2859537, KB2862152, KB2862330, KB2862335, KB2864058, KB2864063, KB2868038, KB2868626, KB2876217, KB2884256, KB2892076, KB2893294, KB2894845, KB2898715, KB2900986, KB2901115, KB2914368, KB2918614, KB2922229, KB2926765, KB2929961, KB2957503, KB2957509, KB2961072, KB2972207, KB2978114, KB2989935, KB2992611, KB2993254, KB2993651, KB2993958, KB2998579, KB3002885, KB3006226, KB3008923, KB3011780, KB3012168, KB3013126, KB3014029, KB3019215, KB3020393, KB3021674, KB923561, KB925902-v2, KB926122, KB929123, KB931836, KB932168, KB933854, KB936357, KB941569, KB942288-v4, KB942831, KB944653, KB948496, KB950762, KB950974, KB952004, KB952069, KB952954, KB954155, KB956572, KB956844, KB958469, KB959426, KB960803, KB960859, KB961118, KB968389, KB969059, KB970483, KB971029, KB971032, KB971657, KB972270, KB973507, KB973540, KB973815, KB973869, KB973904, KB973917-v2, KB974112, KB974318, KB974392, KB974571, KB975025, KB975467, KB975560, KB977816, KB977914, KB978338, KB978542, KB978695, KB978706, KB979309, KB979482, KB979687, KB979907, KB980232, KB982132, KB982666, KB954550-v5, SP1, KB975558_WM8, KB925398_WMP64, Q936181, KB2491683, KB924667-v2, KB925902, KB927891, KB930178,

Page 62: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

62 26 September 2017

Product and Version Number Vulnerable Operating System Validated Critical Security Patches

KB931784, KB933729, KB935839, KB935840, KB936021, KB936782, KB938127, KB941202, KB941568, KB941644, KB942763, KB942830, KB942840, KB943055, KB943460, KB943485, KB944533, KB946026, KB2507618, KB2544521, KB2604078, KB2624667, KB2645640, KB2646524, KB2656358, KB2656376-v2, KB2661254, KB2719985, KB2724197, KB2731847-v2, KB2736233, KB2744842, KB2753842-v2, KB2756822, KB2758857, KB2808735, KB2813170, KB2820197, KB2833949, KB2845187, KB2849470, KB2850869, KB2863058, KB2876331, KB2879017, KB2883150, KB2296011, KB2360937, KB2440591, KB2476490, KB2478971, KB936357-v2, KB956802, KB967723, KB975713, KB981322, XpsEPSC Oracle 10.0.1.4, Oracle 10G patch 10.1.0.5.28, Oracle patch 10.1.0.5.32

Oracle Patch Rollup for 10.1.0.5 (P13413002)

Centricity Cardiology DMS Interface

Server (v. 4.3.x)

Windows Server 2008 KB2305420, KB2387149, KB2419640, KB2423089, KB2481109,

KB2483185, KB2491683, KB2506212, KB2508429

KB2507938, KB2509553, KB2511455, KB2518295, KB2535512,

KB2536275, KB2536276, KB2544893, KB2564958, KB2570947,

KB2585542, KB2598479, KB2604094, KB2620704, KB2621440,

KB2631813, KB2643719, KB2653956, KB2654428, KB2655992,

KB2676562, KB2685939, KB2690533, KB2698365, KB2705219,

KB2712808, KB2726535, KB2727528, KB2729453, KB2742601,

KB2770660, KB2780091, KB2785220, KB2803821, KB2807986,

KB2813345, KB2813430, KB2820917, KB2839894, KB2840149,

KB2849470, KB2861855, KB2862152, KB2862330, KB2862335

KB2862966, KB2862973, KB2864063, KB2864202, KB2868038,

Page 63: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

63 26 September 2017

Product and Version Number Vulnerable Operating System Validated Critical Security Patches

Page 64: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

64 26 September 2017

KB2868626, KB2884256, KB2887069, KB2892075,

KB2893294, KB2894847, KB2900986, KB2901113,

KB2911502, KB2918614, KB2931354, KB2937608,

KB2939576, KB2943344, KB2957189, KB2957509,

KB2961072, KB2968292, KB2972098, KB2972280,

KB2973201, KB2974268, KB2974269, KB2976897,

KB2978116, KB2979568, KB2991963, KB2998579,

KB3002657, KB3003743, KB3004361, KB3005607,

KB3006226, KB3010788, KB3011780, KB3014029,

KB3019215, KB3021674, KB3022777, KB3023213,

KB3032323, KB3033889, KB3033890, KB3035126,

KB3035132, KB3035485, KB3037573, KB3039066,

KB3045171, KB3045685, KB3045999, KB3046002,

KB3046017, KB3046306, KB3046482, KB3048068,

KB3050945, KB3055642, KB3057154, KB3057839,

KB3058515, KB3059317, KB3060716, KB3061518,

KB3063858, KB3067505, KB3067903, KB3068457,

KB3071756, KB3072303, KB3072595, KB3072630,

KB3073921, KB3074541, KB3075220, KB3076895,

KB3076949, KB3078601, KB3080446, KB3081320,

KB3084135, KB3086255, KB3087039, KB3092601,

KB3097966, KB3097988, KB3101722, KB3108371,

KB3108381, KB3108664, KB3109094, KB3109103,

KB3109560, KB3110329, KB3115858, KB3122646,

KB3124001, KB3124275, KB3124280, KB3124624,

KB3126041, KB3126587, KB3126593, KB3127219,

KB3133043, KB3135982, KB3135987, KB3139398,

KB3139852, KB3139914, KB3139940, KB3140410,

KB3140709, KB3140735, KB954155, KB960859

KB967723, KB968816, KB970430, KB971657,

KB972270, KB973507, KB973540, KB973565, KB974318

Page 65: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

65 26 September 2017

Product and Version Number Vulnerable Operating System Validated Critical Security Patches

KB974571, KB975558, KB975560, KB976768,

KB976772, KB977816, KB978338, KB978542,

KB978601, KB979309, KB979482, KB979687,

KB979688, KB980842, KB982132, KB982799

Page 66: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

66 26 September 2017

Centricity Cardiology DMS

Database Server (v. 4.3.x)

Windows Server 2008 KB2124261, KB2305420, KB2387149, KB2419640,

KB2423089, KB2481109, KB2483185, KB2506212,

KB2507938, KB2508429, KB2509553, KB2511455,

KB2518295, KB2535512, KB2536275, KB2536276,

KB2544893, KB2564958, KB2570947, KB2585542,

KB2598479, KB2604094, KB2620704, KB2621440,

KB2631813, KB2643719, KB2653956, KB2654428,

KB2655992, KB2676562, KB2685939, KB2690533,

KB2698365, KB2705219, KB2712808, KB2727528,

KB2729453, KB2742601, KB2770660, KB2780091,

KB2785220, KB2803821, KB2807986, KB2813345,

KB2813430, KB2820917, KB2839894, KB2840149,

KB2849470, KB2861855, KB2862152, KB2862330,

KB2862335, KB2862966, KB2862973, KB2864063,

KB2864202, KB2868038, KB2868626, KB2884256,

KB2887069, KB2892075, KB2893294, KB2894847,

KB2900986, KB2901113, KB2911502, KB2918614,

KB2931354, KB2937608, KB2939576, KB2943344,

KB2957189, KB2957509, KB2961072, KB2968292,

KB2972098, KB2972280, KB2973201, KB2974268,

KB2974269, KB2976897, KB2978116, KB2979568,

KB2991963, KB2998579, KB3002657, KB3003743,

KB3004361, KB3005607, KB3006226, KB3010788,

KB3011780, KB3014029, KB3019215, KB3021674,

KB3022777, KB3023213, KB3032323, KB3033889,

KB3033890, KB3035126, KB3035132, KB3035485,

KB3037573, KB3039066, KB3045171, KB3045685,

Page 67: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

67 26 September 2017

Product and Version Number Vulnerable Operating System Validated Critical Security Patches

KB3045999, KB3046002, KB3046017, KB3046306,

KB3046482, KB3048068, KB3050945, KB3055642,

KB3057154, KB3057839, KB3058515, KB3059317,

KB3060716, KB3061518, KB3063858, KB3067505,

KB3067903, KB3068457, KB3071756, KB3072303,

KB3072595, KB3072630, KB3073921, KB3074541,

KB3075220, KB3076895, KB3076949, KB3078601,

KB3080446, KB3081320, KB3084135, KB3086255,

KB3087039, KB3092601, KB3097966, KB3097988,

KB3101722, KB3108371, KB3108381, KB3108664,

KB3109094, KB3109103, KB3109560, KB3110329,

KB3115858, KB3122646, KB3124001, KB3124275,

KB3124280, KB3124624, KB3126041, KB3126587,

KB3126593, KB3127219, KB3133043, KB3135982,

KB3135987, KB3139398, KB3139852, KB3139914,

KB3139940, KB3140410, KB3140709, KB3140735,

KB954155, KB960859, KB967723, KB968816,

KB970430, KB971657, KB972270, KB973507,

KB973540, KB973565, KB974318, KB974571,

KB975558, KB975560, KB976323, KB976768,

KB976772, KB977816, KB978338, KB978542,

KB978601, KB979309, KB979482, KB979687,

KB979688, KB980842, KB982132, KB982666,

KB982799

Page 68: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

68 26 September 2017

Centricity Cardiology DMS Admin

Server (v. 4.3.x)

Windows Server 2008 KB2124261, KB2305420, KB2387149, KB2419640,

KB2423089, KB2481109, KB2483185, KB2491683,

KB2506212, KB2507938, KB2508429, KB2509553,

KB2511455, KB2518295, KB2535512, KB2536275,

KB2536276, KB2544893, KB2564958, KB2570947,

KB2585542, KB2598479, KB2604094, KB2620704,

KB2621440, KB2631813, KB2643719, KB2653956,

Page 69: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

69 26 September 2017

Product and Version Number Vulnerable Operating System Validated Critical Security Patches

Page 70: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

70 26 September 2017

KB2654428, KB2655992, KB2676562, KB2685939,

KB2690533, KB2698365, KB2705219, KB2712808,

KB2727528, KB2729453, KB2742601, KB2763674,

KB2770660, KB2780091, KB2785220, KB2803821,

KB2807986, KB2813345, KB2813430, KB2820917,

KB2839894, KB2840149, KB2849470, KB2861855,

KB2862152, KB2862330, KB2862335, KB2862966,

KB2862973, KB2864063, KB2864202, KB2868038,

KB2868626, KB2884256, KB2887069, KB2892075,

KB2893294, KB2894847, KB2900986, KB2901113,

KB2911502, KB2918614, KB2931354, KB2937608,

KB2939576, KB2943344, KB2957189, KB2957509,

KB2961072, KB2968292, KB2972098, KB2972280,

KB2973201, KB2974268, KB2974269, KB2976897,

KB2978116, KB2979568, KB2991963, KB2998579,

KB3002657, KB3003743, KB3004361, KB3005607,

KB3006226, KB3010788, KB3011780, KB3014029,

KB3019215, KB3020393, KB3021674, KB3022777,

KB3023213, KB3032323, KB3033889, KB3033890,

KB3035126, KB3035132, KB3035485, KB3037573,

KB3039066, KB3045171, KB3045685, KB3045999,

KB3046002, KB3046017, KB3046306, KB3046482,

KB3048068, KB3050945, KB3055642, KB3057154,

KB3057839, KB3058515, KB3059317, KB3060716,

KB3061518, KB3063858, KB3067505, KB3067903,

KB3068457, KB3071756, KB3072303, KB3072595,

KB3072630, KB3073921, KB3074541, KB3075220,

KB3076895, KB3076949, KB3078601, KB3080446,

KB3081320, KB3084135, KB3086255, KB3087039,

KB3092601, KB3097966, KB3097988, KB3101722,

KB3108371, KB3108381, KB3108664, KB3109094,

Page 71: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

71 26 September 2017

Product and Version Number Vulnerable Operating System Validated Critical Security Patches

KB3109103, KB3109560, KB3110329, KB3115858,

KB3122646, KB3124001, KB3124275, KB3124280,

KB3124624, KB3126041, KB3126587, KB3126593,

KB3127219, KB3133043, KB3135982, KB3135987,

KB3139398, KB3139852, KB3139914, KB3139940,

KB3140410, KB3140709, KB3140735, KB954155,

KB960859, KB967723, KB968816, KB970430,

KB971657, KB972270, KB973507, KB973540,

KB973565, KB974318, KB974571, KB975558,

KB975560, KB976323, KB976768, KB976772,

KB977816, KB978338, KB978542, KB978601,

KB979309, KB979482, KB979687, KB979688,

KB980842, KB982132, KB982666, KB982799

Centricity Cardiology DMS Client (v.

2.x) (De-supported)

Windows NT 4.0 SP6A IE5.5

SP2

Centricity Cardiology DMS Client (v.

2.x & 3.x) (De-supported)

IE7.0 not compatible with

Cyberpulse

Windows 2000 SP4 IE 6.0

SP1

Centricity Cardiology DMS Client (v.

4.0) (De-supported)

IE7.0 not compatible with

Cyberpulse

Windows 2000 SP4 IE 6.0

SP1

Page 72: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

72 26 September 2017

Centricity Cardiology DMS Client (v.

4.0x, 4.1.x, 4.2.x)

Windows XP SP3 –

IE 8.0

MS08-030(KB951376-v2),MS08-036(KB950762) MS08-046(KB952954),MS08-049(KB950974) MS08-050(KB946648),MS08-071(KB956802) MS08-076(KB952069_WM9), MS09-010(KB923561) MS09-012(KB952004),MS09-012(KB956572) MS09-013(KB960803),MS09-015(KB959426) MS09-037(KB973507),MS09-037(KB973815) MS09-037(KB973869), MS09-037 (KB973540_WM9) MS09-041(KB971657),MS09-042(KB960859)

Page 73: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

73 26 September 2017

Product and Version Number Vulnerable Operating System Validated Critical Security Patches

Page 74: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

74 26 September 2017

MS09-044(KB956744),MS09-046(KB956844) MS09-051(KB954155_WM9), MS09-051(KB975025) MS09-052(KB974112),MS09-056(KB974571) MS09-057(KB969059),MS09-059(KB975467) MS09-069(KB974392),MS09-071(KB974318) MS09-073(KB973904),MS10-001(KB972270) MS10-005(KB978706),MS10-007(KB975713) MS10-013(KB975560),MS10-013(KB977914) MS10-019(KB979309),MS10-026(KB977816) MS10-029(KB978338),MS10-030(KB978542) MS10-033(KB978695_WM9), MS10-033(KB979482) MS10-042(KB2229593),MS10-052(KB2115168) MS10-052(KB2115168), MS10-055(KB982665), MS10-062(KB975558_WM8), MS10-063(KB981322) MS10-065(KB2124261) MS10-074(KB2387149),MS10-076(KB982132) MS10-081(KB2296011), MS10-082(KB2378111_WM9) MS10-082(KB2378111) MS10-083(KB979687),MS10-084(KB2360937) MS10-096(KB2423089),MS10-097(KB2443105) MS10-099(KB2440591),MS11-002(KB2419632) MS11-006(KB2483185),MS11-011(KB2393802) MS11-013(KB2478971),MS11-014(KB2478960) MS11-015(KB2479943),MS11-017(KB2481109) MS11-020(KB2508429),MS11-024(KB2506212) MS11-030(KB2509553), MS11-031(KB2510531-IE8) MS11-032(KB2507618),MS11-033(KB2485663) MS11-037(KB2544893-v2),

Page 75: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

75 26 September 2017

Product and Version Number Vulnerable Operating System Validated Critical Security Patches

MS11-038(KB2476490) MS11-042(KB2535512),MS11-043(KB2536276-v2) MS11-052(KB2544521-IE8), MS11-056(KB2507938) MS11-062(KB2566454),MS11-071(KB2570947) MS11-075(KB2564958),MS11-080(KB2592799) MS11-092(KB2619339),MS11-093(KB2624667) MS11-097(KB2620712),MS11-100(KB2656358)MS12-001(KB2644615),MS12- 002(KB2603381) MS12-003(KB2646524),MS12-004(KB2598479) MS12-004(KB2631813),MS12-005(KB2584146) MS12-006(KB2585542),MS12-009(KB2645640(KB2653956) MS12-024(KB2653956) MS12-034(KB2659262),MS12-034(KB2676562) MS12-036(KB2685939) ),MS12-043(KB2719985) MS12-045(KB2698365),MS12-048(KB2691442) MS12-049(KB2655992), MS12-053(KB2723135-v2) MS12-054(KB2705219-v2), MS12-054(KB2712808) MS12-055(KB2731847-v2), MS12-063(KB2744842-IE8) MS12-068(KB2724197),MS12-072(KB2727528) MS12-081(KB2758857 )MS13-004(KB2742604Q147222, Q954430,Q973688,KB936929, KB2661254-v2, KB2736233,KB2749655 KB2756822,KB951978, KB952287,KB968389KB2345886, KB2467659, KB2618444-IE8, KB2748349

Page 76: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

76 26 September 2017

Product and Version Number Vulnerable Operating System Validated Critical Security Patches

Page 77: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

77 26 September 2017

Centricity Cardiology DMS Client (v.

4.2.x)

Windows 7 32 SP3 –

IE 9.0

982861, KB2670838, KB971033, KB2479943, KB2491683, KB2506212, KB2509553, KB2511455, KB2532531, KB2533552, KB2533623, KB2534111, KB2536275, KB2536276, KB2544893, KB2552343, KB2560656, KB2564958, KB2570947, KB2579686, KB2585542, KB2604115, KB2619339, KB2620704, KB2621440, KB2631813, KB2639308, KB2644615, KB2653956, KB2654428, KB2656356, KB2667402, KB2676562, KB2685939, KB2690533, KB2698365, KB2705219, KB2712808, KB2718704, KB2727528, KB2729094, KB2731771, KB2736422, KB2742599, KB2758857, KB2770660, KB2786081, KB2798162, KB2803821, KB2807986, KB2813347, KB2813430, KB2832414, KB2834140, KB2835361, KB2836942, KB2839894, KB2840149, KB2840631, KB2847311, KB2847927, KB2859537, KB2861191, KB2861698, KB2862152, KB2862330, KB2862335, KB2862966, KB2862973, KB2864058, KB2864202, KB2868038, KB2868116, KB2868626, KB2871997, KB2882822, KB2884256, KB2887069, KB2888049, KB2892074, KB2893294, KB2894844, KB2900986, KB2911501, KB2912390, KB2918614, KB2922229, KB2926765, KB2929733, KB2931356, KB2937610, KB2939576, KB2943357, KB2957189, KB2957503, KB2957509, KB2961072, KB2968294, KB2971850, KB2972100, KB2972211, KB2972280, KB2973112, KB2973201, KB2973351, KB2976897, KB2977292, KB2978120, KB2978668, KB2978742, KB2979570, KB2981580, KB2984972, KB2991963, KB2992611, KB2993651, KB2993958, KB3003743, KB3004361, KB3004375, KB3005607, KB3006226, KB3010788, KB3011780, KB3013455, KB3019215, KB3019978, KB3021674, KB3021952, KB3022777, KB3023562, KB3023607, KB3029944, KB3031432, KB976902

Page 78: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

78 26 September 2017

Product and Version Number Vulnerable Operating System Validated Critical Security Patches

Page 79: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

79 26 September 2017

Centricity Cardiology DMS Client (v.

4.2.x)

Windows 7 64 SP3 –

IE 9.0

982861, KB2670838, KB2479943, KB2491683, KB2506014, KB2506212, KB2509553, KB2511455, KB2533552, KB2533623, KB2534111, KB2536275, KB2536276, KB2544893, KB2552343, KB2560656, KB2564958, KB2570947, KB2579686, KB2585542, KB2604115, KB2619339, KB2620704, KB2621440, KB2631813, KB2639308, KB2653956, KB2654428, KB2656356, KB2667402, KB2676562, KB2685939, KB2690533, KB2698365, KB2705219, KB2706045, KB2712808, KB2718704, KB2727528, KB2729094, KB2729452, KB2731771, KB2736422, KB2742599, KB2758857, KB2770660, KB2786081, KB2789645, KB2798162, KB2803821, KB2807986, KB2813347, KB2813430, KB2832414, KB2834140, KB2836942, KB2836943, KB2839894, KB2840149, KB2840631, KB2847311, KB2847927, KB2855844, KB2861191, KB2861698, KB2862152, KB2862330, KB2862335, KB2862966, KB2862973, KB2864058, KB2864202, KB2868038, KB2868116, KB2868626, KB2871997, KB2872339, KB2882822, KB2884256, KB2887069, KB2888049, KB2892074, KB2893294, KB2894844, KB2900986, KB2911501, KB2918614, KB2922229, KB2926765, KB2929733, KB2931356, KB2937610, KB2939576, KB2943357, KB2957189, KB2957503, KB2957509, KB2961072, KB2968294, KB2971850, KB2972100, KB2972211, KB2972280, KB2973112, KB2973201, KB2973351, KB2976897, KB2977292, KB2978120, KB2978668, KB2978742, KB2979570, KB2981580, KB2984972, KB2991963, KB2992611, KB2993651, KB2993958, KB3003743, KB3004361, KB3004375, KB3005607, KB3006226, KB3010788, KB3011780, KB3013455, KB3019215, KB3019978, KB3021674, KB3021952, KB3022777, KB3023562, KB3029944, KB3031432, KB976902

Page 80: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

80 26 September 2017

Definitions

Centricity Cardiology INW Server A powerful server responsible to manage communication between critical cath and EP Lab acute care recording devices. It also

functions as a centralized storage server for the clinical waveforms.

Mac-Lab, CardioLab, SpecialsLab and ComboLab Hemodynamic and Electrophysiology Recording Systems and Workstations

Centricity Cardiology DMS Client Networked workstation in which the Centricity Cardiology DMS client application is loaded and executed.

Centricity Cardiology DMS Server Networked architecture includes a Windows based Server that contains database, routing, external interfaces, web and other central

functions.

Current Vulnerability A critical Microsoft Operating System flaw revealed by Microsoft that exists on the product . The flaw has a corrective p atch

distributed by Microsoft that Engineering is in the process of validating.

Validated Security Patches A critical Microsoft security patch that Engineering has validated on the product . The security patch can be installed follo wing the

provided directions.

Page 81: Invasive Cardiology Security Website - GE Healthcare/media/documents/us-global/support... · 2017-10-05 · M ac-L b I T/X i, C rd oL /X , Products: SpecialsLab and ComboLab IT/XT/XTi

GE Healthcare

81 26 September 2017

Contact Information

If you have any additional questions, please contact our Technical Support Department .

Notes:

Microsoft Windows Server 2008 R2 SP1 Security Patch Support

For MLCL v6.9, since Windows Server 2008 R2 security patch support ended April 2013, Microsoft Windows Server 2008 R2 Service Pack 1 - KB976932, 2007 Microsoft Office Suite SP3 -

KB2526086, Microsoft Office 2007 Language Pack SP3 - KB2526086 is a prerequisite for installation of security patches past MS12-054 KB2712808.

Support for version 6.5.6/6.8/6.8.1

As of June 2014, all Mac-Lab/CardioLab/ComboLab/INW Server systems at version 6.5.6/6.8/6.8.1 will no longer have new security patches qualified.

Microsoft Office Security Patch Support

Currently qualified Microsoft Office 2007 SP2 security patches are eligible for MLCL 6.5.6/6.8/6.8.1 Software Only Systems. Office Language Pack 2007 SP3

(http://support .microsoft .com/kb/2526086) is a pre-requisite for the installation of Microsoft Office 2007 SP3 security patches on MLCL v6.5.6/6.8/6.8.1 Software Only Systems.

Support for version 6.5.3/6.5.4

As of October 2010, all Mac-Lab/CardioLab/ComboLab/INW Server systems at version 6.5.3/6.5.4 will no longer have new security patches qualified.

Support for Windows NT

Microsoft no longer provides security patches or support for the Windows NT Operating System. There will be no new security patches for the Mac-Lab/CardioLab 7000/4000/2000 5.x

systems.