CVE-2024-1628

OS command injection vulnerabilities in GE HealthCare ultrasound devices

State: Published
Severity: 8.4 High
Published: May 14, 2024
Updated: Aug 1, 2024
Reserved: Feb 19, 2024

Description

OS command injection vulnerabilities in GE HealthCare ultrasound devices

Scores

CVSS	Score	Vector	Source
3.1	8.4 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	GEHC

Weaknesses

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected Products

Product	Versions
VenueGE HealthCare	R1Affected R2Affected R3 through R3.3Affected R4 through R4.3Affected
Venue GoGE HealthCare	R2Affected R3 through R3.3Affected R4 through R4.3Affected
Venue FitGE HealthCare	R3 through R3.3Affected R4 through R4.3Affected
LOGIQ eGE HealthCare	R7 through R9.1.4Affected R8 through R10.1.3Affected R9 through R11.0.3Affected
LOGIQ HeGE HealthCare	R9.3.1 and earlierAffected
Vivid EGE HealthCare	E95 to before 206Affected E90 to before 206Affected E80 to before 206Affected
Vivid SGE HealthCare	70N to before 206Affected 60N to before 206Affected
Vivid TGE HealthCare	T8 to before 206Affected T9 to before 206Affected
Vivid iqGE HealthCare	before 206Affected
Voluson Expert 16GE HealthCare	0Affected BT24 to before Ext1Affected
Voluson Expert 18GE HealthCare	0Affected BT24 to before Ext1Affected
Voluson Expert 22GE HealthCare	0Affected BT24 to before Ext1Affected
Voluson SWIFTGE HealthCare	0Affected BT24Affected
Invenia ABUS 2.0GE HealthCare	2.2.7 and earlierAffected
LOGIQ E10GE HealthCare	before R3.2.0Affected
LOGIQ E10sGE HealthCare	before R3.2.0Affected
LOGIQ FortisGE HealthCare	before R3.2.0Affected

References

https://securityupdate.gehealthcare.com/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.