1419 matches found
CVE-2024-27107
Weak account password in GE HealthCare EchoPAC products...
GE Proficy Cimplicity WebView Substitute.bcl Directory Traversal
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'uri' class MetasploitModule 'GE Proficy Cimplicity WebView substitute.bcl Directory Traversal', 'Description' = %q This module abuses a directory traversal in G...
kernel: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()
A vulnerability was found in the Linux kernel's Hisilicon Ethernet driver, in the hnsdsafgesrstbyport function, which allows for a possible array overflow, which occurs when an input value exceeds the expected range, leading to potential memory corruption...
sloto.ge Cross Site Scripting vulnerability OBB-3939638
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The vulnerability of GE HealthCare’s ultrasonic diagnostic system’s Kiosk Mode allows intruders to bypass security restrictions, gain unauthorized access to protected information, and enhance their privileges.
The vulnerability of GE HealthCare’s ultrasonic diagnostic system’s Kiosk Mode feature is related to a breach in data protection mechanisms. Exploiting this vulnerability can allow attackers to circumvent security restrictions, gain unauthorized access to protected information, and enhance their...
The vulnerability of the getAllFolderContents() function in the web application of the Common Service Desktop of the ultrasonic diagnostic system GE HealthCare allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the getAllFolderContents function in the GE HealthCare ultrasonic diagnostic system’s web application is related to an incorrect restriction on the path to the restricted-access directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...
The vulnerability of GE HealthCare EchoPAC medical software, related to insufficient access control, allows attackers to escalate their privileges.
The vulnerability of GE HealthCare EchoPAC medical software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...
CISA Releases Seventeen Industrial Control Systems Advisories
CISA released seventeen Industrial Control Systems ICS advisories on May 16, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-137-01 Siemens Parasolid ICSA-24-137-02 Siemens SICAM Products ICSA-24-137-03 Siemen...
Researchers Uncover 11 Security Flaws in GE HealthCare Ultrasound Machines
Security researchers have disclosed almost a dozen security flaws impacting the GE HealthCare Vivid Ultrasound product family that could be exploited by malicious actors to tamper with patient data and even install ransomware under certain circumstances. "The impacts enabled by these flaws are...
CVE-2024-27110
Elevation of privilege vulnerability in GE HealthCare EchoPAC products...
CVE-2024-27110 Elevation of privilege vulnerability in GE HealthCare EchoPAC products
Elevation of privilege vulnerability in GE HealthCare EchoPAC products...
CVE-2024-27110 Elevation of privilege vulnerability in GE HealthCare EchoPAC products
Elevation of privilege vulnerability in GE HealthCare EchoPAC products...
CVE-2024-27110
CVE-2024-27110 is an elevation-of-privilege vulnerability in GE HealthCare EchoPAC products. Public docs describe EchoPAC (and related EchoPAC-associated workstations) as affected; the underlying root cause and specific vulnerable components/versions are not detailed in the provided sources. The ...
CVE-2024-27109
Insufficiently protected credentials in GE HealthCare EchoPAC products...
CVE-2024-27108
Non privileged access to critical file vulnerability in GE HealthCare EchoPAC products...
CVE-2024-27107
Weak account password in GE HealthCare EchoPAC products...
CVE-2024-27106
Vulnerable data in transit in GE HealthCare EchoPAC products...
CVE-2024-1630
Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component...