CVE-2024-1629mediumCWE-22

CVE-2024-1629: falha de média gravidade em GE HealthCare LOGIQ e

Path traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar LOGIQ e+ Monitorar LOGIQ He

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.2epss 0.3%
Path traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
GE HealthCare · LOGIQ eGE HealthCare · LOGIQ E10GE HealthCare · LOGIQ E10sGE HealthCare · LOGIQ FortisGE HealthCare · LOGIQ HeGE HealthCare · VenueGE HealthCare · Venue FitGE HealthCare · Venue GoGE HealthCare · Vivid EGE HealthCare · Vivid iqGE HealthCare · Vivid SGE HealthCare · Vivid TGE HealthCare · Voluson Expert 16GE HealthCare · Voluson Expert 18GE HealthCare · Voluson Expert 22GE HealthCare · Voluson SWIFT
CVEs relacionadas — GE HealthCare LOGIQ e

No mesmo produto, das mais perigosas para as menos.

CVE-2024-1628HIGHOS command injection vulnerabilities in GE HealthCare ultrasound devicesEPSS 0.8%CVE-2024-1630HIGHPath traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device componentEPSS 0.3%CVE-2024-1486HIGHElevation of privileges via misconfigured access control list in GE HealthCare ultrasound devicesEPSS 0.2%