Vulnerabilities

TI-2024-01512 CVE-2024-1629 · GHSA-425c-w8px-7q9c

Path traversal in GE HealthCare Venue

LOW 27

Path traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00283 Published 2024-05-14 Fixed in 206, R3.2.0 CWE-22

TI-2024-01511 CVE-2024-1628 · GHSA-7q49-g67j-hfp2

MEDIUM 40

OS command injection vulnerabilities in GE HealthCare ultrasound devices

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00836 Published 2024-05-14 Fixed in 206, Ext1 +1 CWE-78

TI-2024-01388 CVE-2024-1486 · GHSA-5x5p-62r5-2xx8

LOW 34

Elevation of privileges via misconfigured access control list in GE HealthCare ultrasound devices

CVSS 3.1HIGH 7.4 Local No auth No interaction EPSS 0.00201 Published 2024-05-14 Fixed in 206, 2.2.9 CWE-732