Description
OS command injection vulnerabilities in GE HealthCare ultrasound devices
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GE HealthCare | Venue | R1, R2, R3 – ≤ R3.3, R4 – ≤ R4.3 | — |
| GE HealthCare | Venue Go | R2, R3 – ≤ R3.3, R4 – ≤ R4.3 | — |
| GE HealthCare | Venue Fit | R3 – ≤ R3.3, R4 – ≤ R4.3 | — |
| GE HealthCare | LOGIQ e | R7 – ≤ R9.1.4, R8 – ≤ R10.1.3, R9 – ≤ R11.0.3 | — |
| GE HealthCare | LOGIQ He | ≤ R9.3.1 | — |
| GE HealthCare | Vivid E | E95 – < 206, E90 – < 206, E80 – < 206 | 206 |
| GE HealthCare | Vivid S | 70N – < 206, 60N – < 206 | 206 |
| GE HealthCare | Vivid T | T8 – < 206, T9 – < 206 | 206 |
| GE HealthCare | Vivid iq | < 206 | 206 |
| GE HealthCare | Voluson Expert 16 | BT24 – < Ext1 | Ext1 |
| GE HealthCare | Voluson Expert 18 | BT24 – < Ext1 | Ext1 |
| GE HealthCare | Voluson Expert 22 | BT24 – < Ext1 | Ext1 |
| GE HealthCare | Voluson SWIFT | BT24 | — |
| GE HealthCare | Invenia ABUS 2.0 | ≤ 2.2.7 | — |
| GE HealthCare | LOGIQ E10 | < R3.2.0 | R3.2.0 |
| GE HealthCare | LOGIQ E10s | < R3.2.0 | R3.2.0 |
| GE HealthCare | LOGIQ Fortis | < R3.2.0 | R3.2.0 |