CVE-2024-27106

The CVE-2024-27106 entry concerns GE HealthCare EchoPAC products with vulnerable data in transit due to a lack of encryption. Affected component/behavior is data in transit handling, and the underlying root cause is insufficient encryption measures. Reported impact is potential unauthorized acces...

CVE-2024-27106 Vulnerable data in transit in GE HealthCare EchoPAC products

Vulnerable data in transit in GE HealthCare EchoPAC products...

CVE-2024-1630 Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component

Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component...

CVE-2024-1630

CVE-2024-1630 describes a path traversal vulnerability in the getAllFolderContents() function of GE HealthCare’s Common Service Desktop, a component of GE HealthCare ultrasound devices. Affects the Common Service Desktop software; root cause is improper restriction of directory paths, enabling ac...

CVE-2024-1630 Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component

Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component...

CVE-2024-1629 Path traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component

Path traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component...

CVE-2024-1629 Path traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component

Path traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component...

CVE-2024-1629

CVE-2024-1629 describes a path traversal vulnerability in the deleteFiles() function of GE HealthCare’s Common Service Desktop, part of GE HealthCare ultrasound devices. Technical details from connected sources identify the affected component as the Common Service Desktop within the device ecosys...

CVE-2024-1628

OS command injection vulnerabilities in GE HealthCare ultrasound devices...

CVE-2024-1486

Elevation of privileges via misconfigured access control list in GE HealthCare ultrasound devices...

CVE-2024-1628 OS command injection vulnerabilities in GE HealthCare ultrasound devices

OS command injection vulnerabilities in GE HealthCare ultrasound devices...

CVE-2024-1628

Technical details about CVE-2024-1628 are not publicly available in the provided connected documents. Monitor for updates from GE HealthCare advisories and security bulletins for affected products, versions, impact, and fixes.

CVE-2024-1628 OS command injection vulnerabilities in GE HealthCare ultrasound devices

OS command injection vulnerabilities in GE HealthCare ultrasound devices...

CVE-2024-1486 Elevation of privileges via misconfigured access control list in GE HealthCare ultrasound devices

Elevation of privileges via misconfigured access control list in GE HealthCare ultrasound devices...

CVE-2024-1486 Elevation of privileges via misconfigured access control list in GE HealthCare ultrasound devices

Elevation of privileges via misconfigured access control list in GE HealthCare ultrasound devices...

CVE-2024-1486

CVE-2024-1486 is a confirmed vulnerability in GE Healthcare ultrasound devices caused by a misconfigured access control list that enables elevation of privileges. The Red Hat/PT-security entries corroborate the flaw as an ACL misconfiguration that allows an attacker with local access to gain high...

General Electric Healthcare Imaging 安全漏洞

GE General Electric Healthcare Imaging is a medical imaging device from General Electric GE. A security vulnerability exists in General Electric Healthcare Imaging that stems from inadequate credential protection...

General Electric Healthcare Imaging 安全漏洞

GE General Electric Healthcare Imaging is a medical imaging device from General Electric GE. A security vulnerability exists in General Electric Healthcare Imaging that stems from a flaw in data in transit...

PT-2024-3625 · Ge Healthcare · Ge Healthcare Echopac

Name of the Vulnerable Software and Affected Versions: GE HealthCare EchoPAC affected versions not specified Description: The issue is related to the use of predefined credentials in the software. Exploitation of this issue may allow a remote attacker to elevate privileges and execute arbitrary...

PT-2024-18178 · Ge Healthcare · Ge Healthcare Ultrasound Devices

Name of the Vulnerable Software and Affected Versions: GE HealthCare ultrasound devices affected versions not specified Description: The issue concerns OS command injection vulnerabilities. No further details are provided about the estimated number of potentially affected devices or real-world...