Riskcovery

CVE-2024-1630

Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component

State
Published
Severity
7.7 High
Published
May 14, 2024
Updated
Aug 22, 2024
Reserved
Feb 19, 2024

Read the record on cve.org

Description

Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component

Scores

CVSSScoreVectorSource
3.17.7 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NGEHC

Weaknesses

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected Products

ProductVersions
VenueGE HealthCare
  • R1Affected
  • R2Affected
  • R3 through R3.3Affected
  • R4 through R4.3Affected
Venue GoGE HealthCare
  • R2Affected
  • R3 through R3.3Affected
  • R4 through R4.3Affected
Venue FitGE HealthCare
  • R3 through R3.3Affected
  • R4 through R4.3Affected
LOGIQ eGE HealthCare
  • R7 through R9.1.4Affected
  • R8 through R10.1.3Affected
  • R9 through R11.0.3Affected
LOGIQ HeGE HealthCare
  • R9.3.1 and earlierAffected
Vivid EGE HealthCare
  • E95 to before 206Affected
  • E90 to before 206Affected
  • E80 to before 206Affected
Vivid TGE HealthCare
  • T8 to before 206Affected
  • T9 to before 206Affected
Vivid iqGE HealthCare
  • before 206Affected
Voluson Expert 16GE HealthCare
  • 0Affected
  • BT24Affected
Voluson Expert 18GE HealthCare
  • 0Affected
  • BT24Affected
Voluson Expert 22GE HealthCare
  • 0Affected
  • BT24Affected
Voluson SWIFTGE HealthCare
  • 0Affected
  • BT24Affected
LOGIQ E10GE HealthCare
  • before R3.2.0Affected
LOGIQ E10sGE HealthCare
  • before R3.2.0Affected
LOGIQ FortisGE HealthCare
  • before R3.2.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.