Description
Elevation of privileges via misconfigured access control list in GE HealthCare ultrasound devices
Metrics
CVSS 3.1 7.4/10
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| GE HealthCare | Venue | R1; R2; >= R3, <= R3.3; >= R4, <= R4.2 |
| GE HealthCare | Venue Go | R2; >= R3, <= R3.3; >= R4, <= R4.2 |
| GE HealthCare | Venue Fit | >= R3, <= R3.3; >= R4, <= R4.2 |
| GE HealthCare | LOGIQ e | >= R7, <= R9.1.4; >= R8, <= R10.1.3; >= R9, <= R11.0.2 |
| GE HealthCare | LOGIQ He | <= R9.3.1 |
| GE HealthCare | Vivid E | >= E95, < 206; >= E90, < 206; >= E80, < 206; >= E9 113.2, <= 113.2 |
| GE HealthCare | Vivid S | >= 70N, < 206; >= 60N, < 206 |
| GE HealthCare | Vivid T | >= T8, < 206; >= T9, < 206 |
| GE HealthCare | Vivid iq | < 206 |
| GE HealthCare | Invenia ABUS | 1.2.3 |
| GE HealthCare | Invenia ABUS 2.0 | < 2.2.9 |
| gehealthcare | venue_firmware | R1; R2; >= R3, <= R3.3; >= R4, <= R4.2 |
| gehealthcare | venue_go_firmware | R2; >= R3, <= R3.3; >= R4, <= R4.2 |
| gehealthcare | venue_fit_firmware | >= R3, <= R3.3; >= R4, <= R4.2 |
| gehealthcare | logiq_e_firmware | >= R7, <= R9.1.4; >= R8, <= R10.1.3; >= R9, <= R11.0.2 |
| gehealthcare | logiq_he_firmware | <= R9.3.1 |
| gehealthcare | vivid_e_firmware | >= E95, < 206; >= E90, < 206; >= E80, < 206; >= E9 113.2, <= 113.2 |
| gehealthcare | vivid_s_firmware | >= 70N, < 206; >= 60N, < 206 |
| gehealthcare | vivid_t_firmware | >= T8, < 206; >= T9, < 206 |
| gehealthcare | vivid_iq_firmware | < 206 |
| gehealthcare | invenia_abus_firmware | 1.2.3 |
| gehealthcare | invenia_abus_2.0_firmware | < 2.2.9 |
References
Timeline
- Published
- May 14, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Deferred