CVE-2024-27110

CVE-2024-27110 is an elevation-of-privilege vulnerability in GE HealthCare EchoPAC products. Public docs describe EchoPAC (and related EchoPAC-associated workstations) as affected; the underlying root cause and specific vulnerable components/versions are not detailed in the provided sources. The ...

CVE-2024-27109

Insufficiently protected credentials in GE HealthCare EchoPAC products...

CVE-2024-27108

Non privileged access to critical file vulnerability in GE HealthCare EchoPAC products...

CVE-2024-27107

Weak account password in GE HealthCare EchoPAC products...

CVE-2024-27106

Vulnerable data in transit in GE HealthCare EchoPAC products...

CVE-2024-1630

Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component...

CVE-2024-1629

Path traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component...

CVE-2024-27109

Technical details are not publicly available in the provided documents. Monitor for updates on CVE-2024-27109.

CVE-2024-27109 Insufficiently protected credentials in GE HealthCare EchoPAC products

Insufficiently protected credentials in GE HealthCare EchoPAC products...

CVE-2024-27109 Insufficiently protected credentials in GE HealthCare EchoPAC products

Insufficiently protected credentials in GE HealthCare EchoPAC products...

CVE-2024-27108

CVE-2024-27108 affects GE HealthCare EchoPAC; root cause is a permission/configuration issue that allows non-privileged access to critical files. Impact per sources: confidentiality, integrity, and availability HIGH. Related entries (PT-2024-3657) describe incorrect permission assignments enablin...

CVE-2024-27108 Non privileged access to critical file vulnerability in GE HealthCare EchoPAC products

Non privileged access to critical file vulnerability in GE HealthCare EchoPAC products...

CVE-2024-27108 Non privileged access to critical file vulnerability in GE HealthCare EchoPAC products

Non privileged access to critical file vulnerability in GE HealthCare EchoPAC products...

CVE-2024-27107 Weak account password in GE HealthCare EchoPAC products

Weak account password in GE HealthCare EchoPAC products...

CVE-2024-27107 Weak account password in GE HealthCare EchoPAC products

Weak account password in GE HealthCare EchoPAC products...

CVE-2024-27107

CVE-2024-27107 concerns GE HealthCare EchoPAC with a weakness in credentials (hard-coded/predefined passwords) in the EchoPAC workflow. Affected component is EchoPAC (and related EchoPAC deployment scenarios) and the root cause is credential handling allowing unauthorized access. The connected do...

CVE-2024-27106 Vulnerable data in transit in GE HealthCare EchoPAC products

Vulnerable data in transit in GE HealthCare EchoPAC products...

CVE-2024-27106 Vulnerable data in transit in GE HealthCare EchoPAC products

Vulnerable data in transit in GE HealthCare EchoPAC products...

CVE-2024-27106

The CVE-2024-27106 entry concerns GE HealthCare EchoPAC products with vulnerable data in transit due to a lack of encryption. Affected component/behavior is data in transit handling, and the underlying root cause is insufficient encryption measures. Reported impact is potential unauthorized acces...

CVE-2024-1630 Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component

Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component...