Skip to content
OpenAdvisories
High · 7.7 CVE-2024-1630 EUVD-2024-17370GHSA-gwj2-vqgr-4qxf

Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component

Published May 14, 2024 · Updated Aug 22, 2024 · Assigned by GEHC

Description

Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component

Affected products

VendorProductAffectedFixed
GE HealthCare Venue R1, R2, R3 – ≤ R3.3, R4 – ≤ R4.3 —
GE HealthCare Venue Go R2, R3 – ≤ R3.3, R4 – ≤ R4.3 —
GE HealthCare Venue Fit R3 – ≤ R3.3, R4 – ≤ R4.3 —
GE HealthCare LOGIQ e R7 – ≤ R9.1.4, R8 – ≤ R10.1.3, R9 – ≤ R11.0.3 —
GE HealthCare LOGIQ He ≤ R9.3.1 —
GE HealthCare Vivid E E95 – < 206, E90 – < 206, E80 – < 206 206
GE HealthCare Vivid T T8 – < 206, T9 – < 206 206
GE HealthCare Vivid iq < 206 206
GE HealthCare Voluson Expert 16 BT24 —
GE HealthCare Voluson Expert 18 BT24 —
GE HealthCare Voluson Expert 22 BT24 —
GE HealthCare Voluson SWIFT BT24 —
GE HealthCare LOGIQ E10 < R3.2.0 R3.2.0
GE HealthCare LOGIQ E10s < R3.2.0 R3.2.0
GE HealthCare LOGIQ Fortis < R3.2.0 R3.2.0

References