CVE-2024-1628highCWE-78

CVE-2024-1628: falha de alta gravidade em GE HealthCare Invenia ABUS 2.0

OS command injection vulnerabilities in GE HealthCare ultrasound devices

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar LOGIQ e+ Monitorar LOGIQ He

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.4epss 0.8%
OS command injection vulnerabilities in GE HealthCare ultrasound devices
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
GE HealthCare · Invenia ABUS 2.0GE HealthCare · LOGIQ eGE HealthCare · LOGIQ E10GE HealthCare · LOGIQ E10sGE HealthCare · LOGIQ FortisGE HealthCare · LOGIQ HeGE HealthCare · VenueGE HealthCare · Venue FitGE HealthCare · Venue GoGE HealthCare · Vivid EGE HealthCare · Vivid iqGE HealthCare · Vivid SGE HealthCare · Vivid TGE HealthCare · Voluson Expert 16GE HealthCare · Voluson Expert 18GE HealthCare · Voluson Expert 22GE HealthCare · Voluson SWIFT
CVEs relacionadas — GE HealthCare Invenia ABUS 2.0

No mesmo produto, das mais perigosas para as menos.

CVE-2024-1630HIGHPath traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device componentEPSS 0.3%CVE-2024-1629MEDIUMPath traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device componentEPSS 0.3%CVE-2024-1486HIGHElevation of privileges via misconfigured access control list in GE HealthCare ultrasound devicesEPSS 0.2%