Skip to content
OpenAdvisories
Medium · 5.9 CVE-2020-36548 EUVD-2020-24024GHSA-gxpm-c49g-8q5r

GE Voluson S8 Service Browser users.cgi improper authentication

Published Jun 17, 2022 · Updated Apr 16, 2025 · Assigned by icscert

Description

A vulnerability classified as problematic has been found in GE Voluson S8. Affected is the file /uscgi-bin/users.cgi of the Service Browser. The manipulation leads to improper authentication and elevated access possibilities. It is possible to launch the attack on the local host.

Affected products

VendorProductAffectedFixed
GE Voluson S8 — —

References