All 4 CVE vulnerabilities found in Venue, with AI-generated Chinese analysis, references, and POCs.
Vendor: GE HealthCare
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2024-1630 | Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component CWE-22 | 7.7 | High | 2024-05-14 |
| CVE-2024-1629 | Path traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component CWE-22 | 6.2 | Medium | 2024-05-14 |
| CVE-2024-1628 | OS command injection vulnerabilities in GE HealthCare ultrasound devices CWE-78 | 8.4 | High | 2024-05-14 |
| CVE-2024-1486 | Elevation of privileges via misconfigured access control list in GE HealthCare ultrasound devices CWE-732 | 7.4 | High | 2024-05-14 |
All 4 known CVE vulnerabilities affecting Venue with full Chinese analysis, references, and POCs where available.