GE Healthcare
13 CVEs across 25 GE Healthcare products. Browse GE Healthcare vulnerabilities, severities, and proof-of-concept exploits.
GE Healthcare products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-27110 | High | 8.4 | 2024-05-14 | Elevation of privilege vulnerability in GE HealthCare EchoPAC products |
CVE-2024-27109 | High | 7.6 | 2024-05-14 | Insufficiently protected credentials in GE HealthCare EchoPAC products |
CVE-2024-27108 | Medium | 6.8 | 2024-05-14 | Non privileged access to critical file vulnerability in GE HealthCare EchoPAC products |
CVE-2024-27107 | Critical | 9.6 | 2024-05-14 | Weak account password in GE HealthCare EchoPAC products |
CVE-2024-27106 | Medium | 5.7 | 2024-05-14 | Vulnerable data in transit in GE HealthCare EchoPAC products |
CVE-2024-1630 | High | 7.7 | 2024-05-14 | Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component |
CVE-2024-1629 | Medium | 6.2 | 2024-05-14 | Path traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component |
CVE-2024-1628 | High | 8.4 | 2024-05-14 | OS command injection vulnerabilities in GE HealthCare ultrasound devices |
CVE-2024-1486 | High | 7.4 | 2024-05-14 | Elevation of privileges via misconfigured access control list in GE HealthCare ultrasound devices |
CVE-2017-14008 | Critical | 9.8 | 2018-03-20 | GE Centricity PACS RA1000, diagnostic image analysis, all current versions are affected these devices use default or hard-coded credentials. Successful exploit… |
CVE-2017-14006 | Critical | 9.8 | 2018-03-20 | GE Xeleris versions 1.0,1.1,2.1,3.0,3.1, medical imaging systems, all current versions are affected, these devices use default or hard-coded credentials. Succe… |
CVE-2017-14004 | Critical | 9.8 | 2018-03-20 | GE GEMNet License server (EchoServer) all current versions are affected these devices use default or hard-coded credentials. Successful exploitation of this vu… |
CVE-2017-14002 | Critical | 9.8 | 2018-03-20 | GE Infinia/Infinia with Hawkeye 4 medical imaging systems all current versions are affected these devices use default or hard-coded credentials. Successful exp… |