The vulnerability of the getAllFolderContents() function in the web application of the Common Service Desktop of the ultrasonic diagnostic system GE HealthCare allows a malicious individual to gain unauthorized access to protected information.

🗓️ 03 Jun 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

The getAllFolderContents() vulnerability in GE HealthCare ultrasonic diagnostic system web app allows unauthorized access due to improper path restrictions.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-1630	17 May 202417:05	–	circl
CNNVD	General Electric Healthcare Ultrasound 路径遍历漏洞	14 May 202400:00	–	cnnvd
CVE	CVE-2024-1630	14 May 202416:55	–	cve
Cvelist	CVE-2024-1630 Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component	14 May 202416:55	–	cvelist
EUVD	EUVD-2024-17370	3 Oct 202520:07	–	euvd
NVD	CVE-2024-1630	14 May 202417:15	–	nvd
Positive Technologies	PT-2024-3919 · Ge Healthcare · Common Service Desktop	19 Feb 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-1630	5 Feb 202505:22	–	redhatcve
The Hacker News	Researchers Uncover 11 Security Flaws in GE HealthCare Ultrasound Machines	16 May 202410:12	–	thn
Vulnrichment	CVE-2024-1630 Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component	14 May 202416:55	–	vulnrichment

Vulners

Node

ge_healthcare invenia_abusRange2.0–2.2.7

ge_healthcare vivid_e95Match204

ge_healthcare vivid_e95Match206

ge_healthcare vivid_e90Match206

ge_healthcare vivid_e90Match204

ge_healthcare vivid_e80Match204

ge_healthcare vivid_e80Match206

ge_healthcare vivid_s60nMatch206

ge_healthcare vivid_s70nMatch206

ge_healthcare vivid_s70nMatch204

ge_healthcare vivid_s60nMatch204

ge_healthcare vivid_t8Range≤206

ge_healthcare vivid_t9Range≤206

ge_healthcare vivid_iqRange≤206

ge_healthcare vivid_iqRange<204.117

ge_healthcare vivid_t8Range<204.117

ge_healthcare vivid_t9Range<204.117

ge_healthcare vivid_t9Range<205.117

ge_healthcare vivid_t8Range<205.117

ge_healthcare vivid_iqRange<205.117

ge_healthcare venue_fit_r4Range<4.3

ge_healthcare venue_go_r4Range<4.3

ge_healthcare venue_r4Range<4.3

ge_healthcare venue_r3Range≤3.3

ge_healthcare venue_go_r3Range≤3.3

ge_healthcare venue_fit_r3Range≤3.3

ge_healthcare versana_essential_r2Range≤2.0.3

ge_healthcare versana_premier_r1Range≤1.2.8

ge_healthcare versana_premier_r1Range≤1.0.16

ge_healthcare versana_premier_r2Range≤2.1.8

ge_healthcare versana_active_r1Range≤1.2.2

ge_healthcare versana_active_r1Range≤1.0.9

ge_healthcare versana_balance_r1Range≤1.2.3

ge_healthcare versana_balance_r1Range≤1.0.9

ge_healthcare versana_balance_r2Range≤2.0.7

Source	Link
gehealthcare	www.gehealthcare.com/services/lifecycle-management/product-security-portal/security
nozominetworks	www.nozominetworks.com/blog/ge-healthcare-vivid-ultrasound-vulnerabilities
vuldb	www.vuldb.com/ru/
web	www.web.nvd.nist.gov/view/vuln/detail

03 Jun 2024 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 26.6

CVSS 37.7

EPSS0.00283