CVE-2024-1486highCWE-732

CVE-2024-1486: falha de alta gravidade em GE HealthCare Invenia ABUS

Elevation of privileges via misconfigured access control list in GE HealthCare ultrasound devices

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar LOGIQ e+ Monitorar LOGIQ He

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.4epss 0.2%
Elevation of privileges via misconfigured access control list in GE HealthCare ultrasound devices
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
GE HealthCare · Invenia ABUSGE HealthCare · Invenia ABUS 2.0GE HealthCare · LOGIQ eGE HealthCare · LOGIQ HeGE HealthCare · VenueGE HealthCare · Venue FitGE HealthCare · Venue GoGE HealthCare · Vivid EGE HealthCare · Vivid iqGE HealthCare · Vivid SGE HealthCare · Vivid T
CVEs relacionadas — GE HealthCare Invenia ABUS

No mesmo produto, das mais perigosas para as menos.

CVE-2024-1628HIGHOS command injection vulnerabilities in GE HealthCare ultrasound devicesEPSS 0.8%CVE-2024-1630HIGHPath traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device componentEPSS 0.3%CVE-2024-1629MEDIUMPath traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device componentEPSS 0.3%