Skip to content
OpenAdvisories
High ICSMA-20-049-02 2 CVEs

GE Healthcare Ultrasound products (Update A)

Published Feb 18, 2020 · Updated May 16, 2024 · Revision 2

Vendor: GE Healthcare Product: Invenia ABUS Scan station, not including VScan product line Product: LOGIQ, not including LOGIQ 100 Pro Product: Venue, not including Venue 40 R1-3 and Venue 50 R4-5 Product: Versana Essential Product: Vivid products, not including EchoPAC Product: Voluson, not including ImageVault

Summary

Successful exploitation of these vulnerabilities could allow an attacker with physical access to gain access to the operating system of affected devices.

Vulnerabilities 2

  • High 7.4
    CVE-2024-1486

    Elevation of privileges via misconfigured access control list in GE HealthCare ultrasound devices

    Elevation of privileges via misconfigured access control list in GE HealthCare ultrasound devices

    GE Healthcare Vivid iq Venue Go LOGIQ e
  • Unscored —
    CVE-2020-6977

    A restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of affected devices. Speci…

    GE GE Ultrasound Products

Revision history

  1. #2

    Update A - Added CVE-2024-1486, updated CVSS score for CVE-2020-6977.

  2. #1

    Initial Publication

References