1419 matches found
CVE-2024-27109
Technical details are not publicly available in the provided documents. Monitor for updates on CVE-2024-27109.
CVE-2024-27109 Insufficiently protected credentials in GE HealthCare EchoPAC products
Insufficiently protected credentials in GE HealthCare EchoPAC products...
CVE-2024-27108
CVE-2024-27108 affects GE HealthCare EchoPAC; root cause is a permission/configuration issue that allows non-privileged access to critical files. Impact per sources: confidentiality, integrity, and availability HIGH. Related entries (PT-2024-3657) describe incorrect permission assignments enablin...
CVE-2024-27108 Non privileged access to critical file vulnerability in GE HealthCare EchoPAC products
Non privileged access to critical file vulnerability in GE HealthCare EchoPAC products...
CVE-2024-27108 Non privileged access to critical file vulnerability in GE HealthCare EchoPAC products
Non privileged access to critical file vulnerability in GE HealthCare EchoPAC products...
CVE-2024-27107 Weak account password in GE HealthCare EchoPAC products
Weak account password in GE HealthCare EchoPAC products...
CVE-2024-27107 Weak account password in GE HealthCare EchoPAC products
Weak account password in GE HealthCare EchoPAC products...
CVE-2024-27107
CVE-2024-27107 concerns GE HealthCare EchoPAC with a weakness in credentials (hard-coded/predefined passwords) in the EchoPAC workflow. Affected component is EchoPAC (and related EchoPAC deployment scenarios) and the root cause is credential handling allowing unauthorized access. The connected do...
CVE-2024-27106 Vulnerable data in transit in GE HealthCare EchoPAC products
Vulnerable data in transit in GE HealthCare EchoPAC products...
CVE-2024-27106 Vulnerable data in transit in GE HealthCare EchoPAC products
Vulnerable data in transit in GE HealthCare EchoPAC products...
CVE-2024-27106
The CVE-2024-27106 entry concerns GE HealthCare EchoPAC products with vulnerable data in transit due to a lack of encryption. Affected component/behavior is data in transit handling, and the underlying root cause is insufficient encryption measures. Reported impact is potential unauthorized acces...
CVE-2024-1630 Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component
Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component...
CVE-2024-1630 Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component
Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component...
CVE-2024-1630
CVE-2024-1630 describes a path traversal vulnerability in the getAllFolderContents() function of GE HealthCare’s Common Service Desktop, a component of GE HealthCare ultrasound devices. Affects the Common Service Desktop software; root cause is improper restriction of directory paths, enabling ac...
CVE-2024-1629 Path traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component
Path traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component...
CVE-2024-1629 Path traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component
Path traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component...
CVE-2024-1629
CVE-2024-1629 describes a path traversal vulnerability in the deleteFiles() function of GE HealthCare’s Common Service Desktop, part of GE HealthCare ultrasound devices. Technical details from connected sources identify the affected component as the Common Service Desktop within the device ecosys...
CVE-2024-1628
OS command injection vulnerabilities in GE HealthCare ultrasound devices...