Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2024-1486

Elevation of privileges via misconfigured access control list in GE HealthCare ultrasound devices

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GEHC

Description

Elevation of privileges via misconfigured access control list in GE HealthCare ultrasound devices

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GE HealthCare Venue

Default version status: unaffected

  • R1affected
  • R2affected
  • R3 to ≤ R3.3affected
  • R4 to ≤ R4.2affected

GE HealthCare Venue Go

Default version status: unaffected

  • R2affected
  • R3 to ≤ R3.3affected
  • R4 to ≤ R4.2affected

GE HealthCare Venue Fit

Default version status: unaffected

  • R3 to ≤ R3.3affected
  • R4 to ≤ R4.2affected

GE HealthCare LOGIQ e

Default version status: unaffected

  • R7 to ≤ R9.1.4affected
  • R8 to ≤ R10.1.3affected
  • R9 to ≤ R11.0.2affected

GE HealthCare LOGIQ He

Default version status: unaffected

  • 0 to ≤ R9.3.1affected

GE HealthCare Vivid E

Default version status: unaffected

  • E95 to < 206affected
  • E90 to < 206affected
  • E80 to < 206affected
  • E9 113.2 to ≤ 113.2affected

GE HealthCare Vivid S

Default version status: unaffected

  • 70N to < 206affected
  • 60N to < 206affected

GE HealthCare Vivid T

Default version status: unaffected

  • T8 to < 206affected
  • T9 to < 206affected

GE HealthCare Vivid iq

Default version status: unaffected

  • 0 to < 206affected

GE HealthCare Invenia ABUS

Default version status: unaffected

  • 1.2.3affected

GE HealthCare Invenia ABUS 2.0

Default version status: unaffected

  • 0 to < 2.2.9affected

References