Lucene search

K
vulnrichmentGEHCVULNRICHMENT:CVE-2024-1628
HistoryMay 14, 2024 - 4:04 p.m.

CVE-2024-1628 OS command injection vulnerabilities in GE HealthCare ultrasound devices

2024-05-1416:04:57
CWE-78
GEHC
github.com
3
cve-2024-1628
os command injection
ge healthcare
ultrasound devices

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

Low

EPSS

0

Percentile

9.6%

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

OS command injection vulnerabilities in GE HealthCare ultrasound devices

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:ge_healthcare:venue:*:*:*:*:*:*:*:*"
    ],
    "vendor": "ge_healthcare",
    "product": "venue",
    "versions": [
      {
        "status": "affected",
        "version": "multiple versions"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:ge_healthcare:vivid:*:*:*:*:*:*:*:*"
    ],
    "vendor": "ge_healthcare",
    "product": "vivid",
    "versions": [
      {
        "status": "affected",
        "version": "multiple versions"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:ge_healthcare:voluson:*:*:*:*:*:*:*:*"
    ],
    "vendor": "ge_healthcare",
    "product": "voluson",
    "versions": [
      {
        "status": "affected",
        "version": "multiple versions"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:ge_healthcare:logiq:*:*:*:*:*:*:*:*"
    ],
    "vendor": "ge_healthcare",
    "product": "logiq",
    "versions": [
      {
        "status": "affected",
        "version": "multiple versions"
      }
    ],
    "defaultStatus": "unknown"
  }
]

CVSS3

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

Low

EPSS

0

Percentile

9.6%

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

Related for VULNRICHMENT:CVE-2024-1628