Description
Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
GE HealthCare Venue
Default version status: unaffected
R1affectedR2affectedR3 to ≤ R3.3affectedR4 to ≤ R4.3affected
GE HealthCare Venue Go
Default version status: unaffected
R2affectedR3 to ≤ R3.3affectedR4 to ≤ R4.3affected
GE HealthCare Venue Fit
Default version status: unaffected
R3 to ≤ R3.3affectedR4 to ≤ R4.3affected
GE HealthCare LOGIQ e
Default version status: unaffected
R7 to ≤ R9.1.4affectedR8 to ≤ R10.1.3affectedR9 to ≤ R11.0.3affected
GE HealthCare LOGIQ He
Default version status: unaffected
0 to ≤ R9.3.1affected
GE HealthCare Vivid E
Default version status: unaffected
E95 to < 206affectedE90 to < 206affectedE80 to < 206affected
GE HealthCare Vivid T
Default version status: unaffected
T8 to < 206affectedT9 to < 206affected
GE HealthCare Vivid iq
Default version status: unaffected
0 to < 206affected
GE HealthCare Voluson Expert 16
Default version status: unaffected
0affectedBT24affected
GE HealthCare Voluson Expert 18
Default version status: unaffected
0affectedBT24affected
GE HealthCare Voluson Expert 22
Default version status: unaffected
0affectedBT24affected
GE HealthCare Voluson SWIFT
Default version status: unaffected
0affectedBT24affected
GE HealthCare LOGIQ E10
Default version status: unaffected
0 to < R3.2.0affected
GE HealthCare LOGIQ E10s
Default version status: unaffected
0 to < R3.2.0affected
GE HealthCare LOGIQ Fortis
Default version status: unaffected
0 to < R3.2.0affected