Lucene search

K
cvelistGEHCCVELIST:CVE-2024-1628
HistoryMay 14, 2024 - 4:04 p.m.

CVE-2024-1628 OS command injection vulnerabilities in GE HealthCare ultrasound devices

2024-05-1416:04:57
CWE-78
GEHC
www.cve.org
2
cve-2024-1628
os command injection
ge healthcare
ultrasound devices
vulnerabilities

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9

Confidence

High

EPSS

0

Percentile

9.6%

OS command injection vulnerabilities in GE HealthCare ultrasound devices

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Venue",
    "vendor": "GE HealthCare",
    "versions": [
      {
        "status": "affected",
        "version": "R1"
      },
      {
        "status": "affected",
        "version": "R2"
      },
      {
        "lessThanOrEqual": "R3.3",
        "status": "affected",
        "version": "R3",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "R4.3",
        "status": "affected",
        "version": "R4",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Venue Go",
    "vendor": "GE HealthCare",
    "versions": [
      {
        "status": "affected",
        "version": "R2"
      },
      {
        "lessThanOrEqual": "R3.3",
        "status": "affected",
        "version": "R3",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "R4.3",
        "status": "affected",
        "version": "R4",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Venue Fit",
    "vendor": "GE HealthCare",
    "versions": [
      {
        "lessThanOrEqual": "R3.3",
        "status": "affected",
        "version": "R3",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "R4.3",
        "status": "affected",
        "version": "R4",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "LOGIQ e",
    "vendor": "GE HealthCare",
    "versions": [
      {
        "lessThanOrEqual": "R9.1.4",
        "status": "affected",
        "version": "R7",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "R10.1.3",
        "status": "affected",
        "version": "R8",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "R11.0.3",
        "status": "affected",
        "version": "R9",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "LOGIQ He",
    "vendor": "GE HealthCare",
    "versions": [
      {
        "lessThanOrEqual": "R9.3.1",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Vivid E",
    "vendor": "GE HealthCare",
    "versions": [
      {
        "lessThan": "206",
        "status": "affected",
        "version": "E95",
        "versionType": "custom"
      },
      {
        "lessThan": "206",
        "status": "affected",
        "version": "E90",
        "versionType": "custom"
      },
      {
        "lessThan": "206",
        "status": "affected",
        "version": "E80",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Vivid S",
    "vendor": "GE HealthCare",
    "versions": [
      {
        "lessThan": "206",
        "status": "affected",
        "version": "70N",
        "versionType": "custom"
      },
      {
        "lessThan": "206",
        "status": "affected",
        "version": "60N",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Vivid T",
    "vendor": "GE HealthCare",
    "versions": [
      {
        "lessThan": "206",
        "status": "affected",
        "version": "T8",
        "versionType": "custom"
      },
      {
        "lessThan": "206",
        "status": "affected",
        "version": "T9",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Vivid iq",
    "vendor": "GE HealthCare",
    "versions": [
      {
        "lessThan": "206",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Voluson Expert 16",
    "vendor": "GE HealthCare",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      },
      {
        "lessThan": "Ext1",
        "status": "affected",
        "version": "BT24",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Voluson Expert 18",
    "vendor": "GE HealthCare",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      },
      {
        "lessThan": "Ext1",
        "status": "affected",
        "version": "BT24",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Voluson Expert 22",
    "vendor": "GE HealthCare",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      },
      {
        "lessThan": "Ext1",
        "status": "affected",
        "version": "BT24",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Voluson SWIFT",
    "vendor": "GE HealthCare",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      },
      {
        "status": "affected",
        "version": "BT24"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Invenia ABUS 2.0",
    "vendor": "GE HealthCare",
    "versions": [
      {
        "lessThanOrEqual": "2.2.7",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "LOGIQ E10",
    "vendor": "GE HealthCare",
    "versions": [
      {
        "lessThan": "R3.2.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "LOGIQ E10s",
    "vendor": "GE HealthCare",
    "versions": [
      {
        "lessThan": "R3.2.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "LOGIQ Fortis",
    "vendor": "GE HealthCare",
    "versions": [
      {
        "lessThan": "R3.2.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9

Confidence

High

EPSS

0

Percentile

9.6%

Related for CVELIST:CVE-2024-1628