Privilege escalation in Ge Voluson S8
CVE-2020-36549
A vulnerability classified as critical was found in GE Voluson S8. Affected is the underlying Windows XP operating system. Missing patches might introduce an excessive attack surface. Access to the local network is required for this attack to succeed.
Vulnerability class: Privilege Escalation
EPSS: 0.002 (13.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Ge Voluson S8 — versions n/a
- Ge Voluson_s8
- Ge Voluson_s8_firmware
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (x_refsource_MISC)
- ics-cert@hq.dhs.gov (x_refsource_MISC)
Frequently asked questions
- What is CVE-2020-36549?
- CVE-2020-36549 is a high-severity vulnerability in Ge Voluson S8, classified under Improper Privilege Management. CVSS score: 8.8/10. Published 2022-06-17.
- How severe is CVE-2020-36549?
- High severity. CVSS v3 base score is 8.8 out of 10.