CVE-2024-27109 Insufficiently protected credentials in GE HealthCare EchoPAC products

Insufficiently protected credentials in GE HealthCare EchoPAC products...

CVE-2024-27109 Insufficiently protected credentials in GE HealthCare EchoPAC products

Insufficiently protected credentials in GE HealthCare EchoPAC products...

CVE-2024-27108

CVE-2024-27108 affects GE HealthCare EchoPAC; root cause is a permission/configuration issue that allows non-privileged access to critical files. Impact per sources: confidentiality, integrity, and availability HIGH. Related entries (PT-2024-3657) describe incorrect permission assignments enablin...

CVE-2024-27107 Weak account password in GE HealthCare EchoPAC products

Weak account password in GE HealthCare EchoPAC products...

CVE-2024-27107 Weak account password in GE HealthCare EchoPAC products

Weak account password in GE HealthCare EchoPAC products...

CVE-2024-27107

CVE-2024-27107 concerns GE HealthCare EchoPAC with a weakness in credentials (hard-coded/predefined passwords) in the EchoPAC workflow. Affected component is EchoPAC (and related EchoPAC deployment scenarios) and the root cause is credential handling allowing unauthorized access. The connected do...

CVE-2024-27106 Vulnerable data in transit in GE HealthCare EchoPAC products

Vulnerable data in transit in GE HealthCare EchoPAC products...

CVE-2024-27106

The CVE-2024-27106 entry concerns GE HealthCare EchoPAC products with vulnerable data in transit due to a lack of encryption. Affected component/behavior is data in transit handling, and the underlying root cause is insufficient encryption measures. Reported impact is potential unauthorized acces...

PT-2024-3625 · Ge Healthcare · Ge Healthcare Echopac

Name of the Vulnerable Software and Affected Versions: GE HealthCare EchoPAC affected versions not specified Description: The issue is related to the use of predefined credentials in the software. Exploitation of this issue may allow a remote attacker to elevate privileges and execute arbitrary...

PT-2024-3770

Name of the Vulnerable Software and Affected Versions GE HealthCare EchoPAC products affected versions not specified Description The issue concerns insufficiently protected credentials in the software, which could allow an attacker to impact the confidentiality, integrity, and availability of...

CVE-2024-27107: Use of Hard-coded Credentials

Weak account password in GE HealthCare EchoPAC products...

CVE-2024-27109: Insufficiently Protected Credentials

Insufficiently protected credentials in GE HealthCare EchoPAC products...

CVE-2024-27106: Missing Encryption of Sensitive Data

Vulnerable data in transit in GE HealthCare EchoPAC products...

CVE-2024-27110: Execution with Unnecessary Privileges

Elevation of privilege vulnerability in GE HealthCare EchoPAC products...

CVE-2024-27108: Incorrect Permission Assignment for Critical Resource

Non privileged access to critical file vulnerability in GE HealthCare EchoPAC products...

PT-2024-3917 · Ge Healthcare · Ge Healthcare Echopac

Name of the Vulnerable Software and Affected Versions: GE HealthCare EchoPAC products affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in GE HealthCare EchoPAC products. It is associated with insufficient access control, which could allo...