Description (CNA)
Elevation of privileges via misconfigured access control list in GE HealthCare ultrasound devices
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| GE HealthCare / Venue | affected R1; affected R2; affected R3 through R3.3; affected R4 through R4.2 |
| GE HealthCare / Venue Go | affected R2; affected R3 through R3.3; affected R4 through R4.2 |
| GE HealthCare / Venue Fit | affected R3 through R3.3; affected R4 through R4.2 |
| GE HealthCare / LOGIQ e | affected R7 through R9.1.4; affected R8 through R10.1.3; affected R9 through R11.0.2 |
| GE HealthCare / LOGIQ He | affected 0 through R9.3.1 |
| GE HealthCare / Vivid E | affected E95 before 206; affected E90 before 206; affected E80 before 206; affected E9 113.2 through 113.2 |
| GE HealthCare / Vivid S | affected 70N before 206; affected 60N before 206 |
| GE HealthCare / Vivid T | affected T8 before 206; affected T9 before 206 |
| GE HealthCare / Vivid iq | affected 0 before 206 |
| GE HealthCare / Invenia ABUS | affected 1.2.3 |
| GE HealthCare / Invenia ABUS 2.0 | affected 0 before 2.2.9 |
CWE
CWE-732
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.