Lucene search

K
cvelistGEHCCVELIST:CVE-2024-27107
HistoryMay 14, 2024 - 5:05 p.m.

CVE-2024-27107 Weak account password in GE HealthCare EchoPAC products

2024-05-1417:05:22
CWE-798
GEHC
www.cve.org
cve-2024-27107
weak password
ge healthcare
echopac

9.6 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Weak account password in GE HealthCare EchoPAC products

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "EchoPAC Software Only",
    "vendor": "GE HealthCare",
    "versions": [
      {
        "lessThan": "206.82",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ImageVault",
    "vendor": "GE HealthCare",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "EchoPAC Turnkey",
    "vendor": "GE HealthCare",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      }
    ]
  }
]

9.6 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CVELIST:CVE-2024-27107