Vulnerability-Lookup

CVE-2024-1629 (GCVE-0-2024-1629)

Vulnerability from cvelistv5 – Published: 2024-05-14 16:32 – Updated: 2024-08-01 18:48

Title

Path traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component

Summary

Path traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component

Severity

6.2 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-05-16 16:09 UTC

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

GEHC Scorecard

References

1 reference

URL	Tags
https://securityupdate.gehealthcare.com/

Impacted products

16 products

Vendor	Product	Version
GE HealthCare	Venue	Affected: R1 Affected: R2 Affected: R3 , ≤ R3.3 (custom) Affected: R4 , ≤ R4.3 (custom)
GE HealthCare	Venue Go	Affected: R2 Affected: R3 , ≤ R3.3 (custom) Affected: R4 , ≤ R4.3 (custom)
GE HealthCare	Venue Fit	Affected: R3 , ≤ R3.3 (custom) Affected: R4 , ≤ R4.3 (custom)
GE HealthCare	LOGIQ e	Affected: R7 , ≤ R9.1.4 (custom) Affected: R8 , ≤ R10.1.3 (custom) Affected: R9 , ≤ R11.0.3 (custom)
GE HealthCare	LOGIQ He	Affected: 0 , ≤ R9.3.1 (custom)
GE HealthCare	Vivid E	Affected: E95 , < 206 (custom) Affected: E90 , < 206 (custom) Affected: E80 , < 206 (custom)
GE HealthCare	Vivid S	Affected: 70N , < 206 (custom) Affected: 60N , < 206 (custom)
GE HealthCare	Vivid T	Affected: T8 , < 206 (custom) Affected: T9 , < 206 (custom)
GE HealthCare	Vivid iq	Affected: 0 , < 206 (custom)
GE HealthCare	Voluson Expert 16	Affected: 0 Affected: BT24
GE HealthCare	Voluson Expert 18	Affected: 0 Affected: BT24
GE HealthCare	Voluson Expert 22	Affected: 0 Affected: BT24
GE HealthCare	Voluson SWIFT	Affected: 0 Affected: BT24
GE HealthCare	LOGIQ E10	Affected: 0 , < R3.2.0 (custom)
GE HealthCare	LOGIQ E10s	Affected: 0 , < R3.2.0 (custom)
GE HealthCare	LOGIQ Fortis	Affected: 0 , < R3.2.0 (custom)

Credits

Andrea Palanca and Gabriele Quagliarella of Nozomi Networks

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-1629",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-16T16:09:37.900864Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T18:01:09.761Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T18:48:21.479Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://securityupdate.gehealthcare.com/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Venue",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "status": "affected",
              "version": "R1"
            },
            {
              "status": "affected",
              "version": "R2"
            },
            {
              "lessThanOrEqual": "R3.3",
              "status": "affected",
              "version": "R3",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "R4.3",
              "status": "affected",
              "version": "R4",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Venue Go",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "status": "affected",
              "version": "R2"
            },
            {
              "lessThanOrEqual": "R3.3",
              "status": "affected",
              "version": "R3",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "R4.3",
              "status": "affected",
              "version": "R4",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Venue Fit",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "lessThanOrEqual": "R3.3",
              "status": "affected",
              "version": "R3",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "R4.3",
              "status": "affected",
              "version": "R4",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "LOGIQ e",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "lessThanOrEqual": "R9.1.4",
              "status": "affected",
              "version": "R7",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "R10.1.3",
              "status": "affected",
              "version": "R8",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "R11.0.3",
              "status": "affected",
              "version": "R9",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "LOGIQ He",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "lessThanOrEqual": "R9.3.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Vivid E",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "lessThan": "206",
              "status": "affected",
              "version": "E95",
              "versionType": "custom"
            },
            {
              "lessThan": "206",
              "status": "affected",
              "version": "E90",
              "versionType": "custom"
            },
            {
              "lessThan": "206",
              "status": "affected",
              "version": "E80",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Vivid S",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "lessThan": "206",
              "status": "affected",
              "version": "70N",
              "versionType": "custom"
            },
            {
              "lessThan": "206",
              "status": "affected",
              "version": "60N",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Vivid T",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "lessThan": "206",
              "status": "affected",
              "version": "T8",
              "versionType": "custom"
            },
            {
              "lessThan": "206",
              "status": "affected",
              "version": "T9",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Vivid iq",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "lessThan": "206",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Voluson Expert 16",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "status": "affected",
              "version": "0"
            },
            {
              "status": "affected",
              "version": "BT24"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Voluson Expert 18",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "status": "affected",
              "version": "0"
            },
            {
              "status": "affected",
              "version": "BT24"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Voluson Expert 22",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "status": "affected",
              "version": "0"
            },
            {
              "status": "affected",
              "version": "BT24"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Voluson SWIFT",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "status": "affected",
              "version": "0"
            },
            {
              "status": "affected",
              "version": "BT24"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "LOGIQ E10",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "lessThan": "R3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "LOGIQ E10s",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "lessThan": "R3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "LOGIQ Fortis",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "lessThan": "R3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Andrea Palanca and Gabriele Quagliarella of Nozomi Networks"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Path traversal vulnerability in \u201cdeleteFiles\u201d function of Common Service Desktop, a GE HealthCare ultrasound device component"
            }
          ],
          "value": "Path traversal vulnerability in \u201cdeleteFiles\u201d function of Common Service Desktop, a GE HealthCare ultrasound device component"
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-126",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-126 Path Traversal"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-05-14T16:32:43.530Z",
        "orgId": "171caf72-b841-4e04-a68e-93493aff2b94",
        "shortName": "GEHC"
      },
      "references": [
        {
          "url": "https://securityupdate.gehealthcare.com/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Path traversal vulnerability in \u201cdeleteFiles\u201d function of Common Service Desktop, a GE HealthCare ultrasound device component",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "171caf72-b841-4e04-a68e-93493aff2b94",
    "assignerShortName": "GEHC",
    "cveId": "CVE-2024-1629",
    "datePublished": "2024-05-14T16:32:43.530Z",
    "dateReserved": "2024-02-19T15:23:21.436Z",
    "dateUpdated": "2024-08-01T18:48:21.479Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-1629",
      "date": "2026-10-02",
      "epss": "0.00283",
      "percentile": "0.18923"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Venue",
                "vendor": "GE HealthCare",
                "versions": [
                  {
                    "status": "affected",
                    "version": "R1"
                  },
                  {
                    "status": "affected",
                    "version": "R2"
                  },
                  {
                    "lessThanOrEqual": "R3.3",
                    "status": "affected",
                    "version": "R3",
                    "versionType": "custom"
                  },
                  {
                    "lessThanOrEqual": "R4.3",
                    "status": "affected",
                    "version": "R4",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Venue Go",
                "vendor": "GE HealthCare",
                "versions": [
                  {
                    "status": "affected",
                    "version": "R2"
                  },
                  {
                    "lessThanOrEqual": "R3.3",
                    "status": "affected",
                    "version": "R3",
                    "versionType": "custom"
                  },
                  {
                    "lessThanOrEqual": "R4.3",
                    "status": "affected",
                    "version": "R4",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Venue Fit",
                "vendor": "GE HealthCare",
                "versions": [
                  {
                    "lessThanOrEqual": "R3.3",
                    "status": "affected",
                    "version": "R3",
                    "versionType": "custom"
                  },
                  {
                    "lessThanOrEqual": "R4.3",
                    "status": "affected",
                    "version": "R4",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "LOGIQ e",
                "vendor": "GE HealthCare",
                "versions": [
                  {
                    "lessThanOrEqual": "R9.1.4",
                    "status": "affected",
                    "version": "R7",
                    "versionType": "custom"
                  },
                  {
                    "lessThanOrEqual": "R10.1.3",
                    "status": "affected",
                    "version": "R8",
                    "versionType": "custom"
                  },
                  {
                    "lessThanOrEqual": "R11.0.3",
                    "status": "affected",
                    "version": "R9",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "LOGIQ He",
                "vendor": "GE HealthCare",
                "versions": [
                  {
                    "lessThanOrEqual": "R9.3.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Vivid E",
                "vendor": "GE HealthCare",
                "versions": [
                  {
                    "lessThan": "206",
                    "status": "affected",
                    "version": "E95",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "206",
                    "status": "affected",
                    "version": "E90",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "206",
                    "status": "affected",
                    "version": "E80",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Vivid S",
                "vendor": "GE HealthCare",
                "versions": [
                  {
                    "lessThan": "206",
                    "status": "affected",
                    "version": "70N",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "206",
                    "status": "affected",
                    "version": "60N",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Vivid T",
                "vendor": "GE HealthCare",
                "versions": [
                  {
                    "lessThan": "206",
                    "status": "affected",
                    "version": "T8",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "206",
                    "status": "affected",
                    "version": "T9",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Vivid iq",
                "vendor": "GE HealthCare",
                "versions": [
                  {
                    "lessThan": "206",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Voluson Expert 16",
                "vendor": "GE HealthCare",
                "versions": [
                  {
                    "status": "affected",
                    "version": "0"
                  },
                  {
                    "status": "affected",
                    "version": "BT24"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Voluson Expert 18",
                "vendor": "GE HealthCare",
                "versions": [
                  {
                    "status": "affected",
                    "version": "0"
                  },
                  {
                    "status": "affected",
                    "version": "BT24"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Voluson Expert 22",
                "vendor": "GE HealthCare",
                "versions": [
                  {
                    "status": "affected",
                    "version": "0"
                  },
                  {
                    "status": "affected",
                    "version": "BT24"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Voluson SWIFT",
                "vendor": "GE HealthCare",
                "versions": [
                  {
                    "status": "affected",
                    "version": "0"
                  },
                  {
                    "status": "affected",
                    "version": "BT24"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "LOGIQ E10",
                "vendor": "GE HealthCare",
                "versions": [
                  {
                    "lessThan": "R3.2.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "LOGIQ E10s",
                "vendor": "GE HealthCare",
                "versions": [
                  {
                    "lessThan": "R3.2.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "LOGIQ Fortis",
                "vendor": "GE HealthCare",
                "versions": [
                  {
                    "lessThan": "R3.2.0",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "source": "171caf72-b841-4e04-a68e-93493aff2b94"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Path traversal vulnerability in \u201cdeleteFiles\u201d function of Common Service Desktop, a GE HealthCare ultrasound device component"
          },
          {
            "lang": "es",
            "value": "Vulnerabilidad de Path Traversal en la funci\u00f3n \"deleteFiles\" de Common Service Desktop, un componente del dispositivo de ultrasonido de GE HealthCare"
          }
        ],
        "id": "CVE-2024-1629",
        "lastModified": "2026-06-17T07:04:39.450",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 6.2,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 2.5,
              "impactScore": 3.6,
              "source": "171caf72-b841-4e04-a68e-93493aff2b94",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2024-1629",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-16T16:09:37.900864Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2024-05-14T17:15:29.310",
        "references": [
          {
            "source": "171caf72-b841-4e04-a68e-93493aff2b94",
            "url": "https://securityupdate.gehealthcare.com/"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://securityupdate.gehealthcare.com/"
          }
        ],
        "sourceIdentifier": "171caf72-b841-4e04-a68e-93493aff2b94",
        "vulnStatus": "Deferred",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-22"
              }
            ],
            "source": "171caf72-b841-4e04-a68e-93493aff2b94",
            "type": "Secondary"
          }
        ]
      }
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-01T18:48:21.479Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://securityupdate.gehealthcare.com/"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-1629",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-05-16T16:09:37.900864Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-05-16T16:09:43.138Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Venue",
              "vendor": "GE HealthCare",
              "versions": [
                {
                  "status": "affected",
                  "version": "R1"
                },
                {
                  "status": "affected",
                  "version": "R2"
                },
                {
                  "lessThanOrEqual": "R3.3",
                  "status": "affected",
                  "version": "R3",
                  "versionType": "custom"
                },
                {
                  "lessThanOrEqual": "R4.3",
                  "status": "affected",
                  "version": "R4",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Venue Go",
              "vendor": "GE HealthCare",
              "versions": [
                {
                  "status": "affected",
                  "version": "R2"
                },
                {
                  "lessThanOrEqual": "R3.3",
                  "status": "affected",
                  "version": "R3",
                  "versionType": "custom"
                },
                {
                  "lessThanOrEqual": "R4.3",
                  "status": "affected",
                  "version": "R4",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Venue Fit",
              "vendor": "GE HealthCare",
              "versions": [
                {
                  "lessThanOrEqual": "R3.3",
                  "status": "affected",
                  "version": "R3",
                  "versionType": "custom"
                },
                {
                  "lessThanOrEqual": "R4.3",
                  "status": "affected",
                  "version": "R4",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "LOGIQ e",
              "vendor": "GE HealthCare",
              "versions": [
                {
                  "lessThanOrEqual": "R9.1.4",
                  "status": "affected",
                  "version": "R7",
                  "versionType": "custom"
                },
                {
                  "lessThanOrEqual": "R10.1.3",
                  "status": "affected",
                  "version": "R8",
                  "versionType": "custom"
                },
                {
                  "lessThanOrEqual": "R11.0.3",
                  "status": "affected",
                  "version": "R9",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "LOGIQ He",
              "vendor": "GE HealthCare",
              "versions": [
                {
                  "lessThanOrEqual": "R9.3.1",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Vivid E",
              "vendor": "GE HealthCare",
              "versions": [
                {
                  "lessThan": "206",
                  "status": "affected",
                  "version": "E95",
                  "versionType": "custom"
                },
                {
                  "lessThan": "206",
                  "status": "affected",
                  "version": "E90",
                  "versionType": "custom"
                },
                {
                  "lessThan": "206",
                  "status": "affected",
                  "version": "E80",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Vivid S",
              "vendor": "GE HealthCare",
              "versions": [
                {
                  "lessThan": "206",
                  "status": "affected",
                  "version": "70N",
                  "versionType": "custom"
                },
                {
                  "lessThan": "206",
                  "status": "affected",
                  "version": "60N",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Vivid T",
              "vendor": "GE HealthCare",
              "versions": [
                {
                  "lessThan": "206",
                  "status": "affected",
                  "version": "T8",
                  "versionType": "custom"
                },
                {
                  "lessThan": "206",
                  "status": "affected",
                  "version": "T9",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Vivid iq",
              "vendor": "GE HealthCare",
              "versions": [
                {
                  "lessThan": "206",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Voluson Expert 16",
              "vendor": "GE HealthCare",
              "versions": [
                {
                  "status": "affected",
                  "version": "0"
                },
                {
                  "status": "affected",
                  "version": "BT24"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Voluson Expert 18",
              "vendor": "GE HealthCare",
              "versions": [
                {
                  "status": "affected",
                  "version": "0"
                },
                {
                  "status": "affected",
                  "version": "BT24"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Voluson Expert 22",
              "vendor": "GE HealthCare",
              "versions": [
                {
                  "status": "affected",
                  "version": "0"
                },
                {
                  "status": "affected",
                  "version": "BT24"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Voluson SWIFT",
              "vendor": "GE HealthCare",
              "versions": [
                {
                  "status": "affected",
                  "version": "0"
                },
                {
                  "status": "affected",
                  "version": "BT24"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "LOGIQ E10",
              "vendor": "GE HealthCare",
              "versions": [
                {
                  "lessThan": "R3.2.0",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "LOGIQ E10s",
              "vendor": "GE HealthCare",
              "versions": [
                {
                  "lessThan": "R3.2.0",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "LOGIQ Fortis",
              "vendor": "GE HealthCare",
              "versions": [
                {
                  "lessThan": "R3.2.0",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Andrea Palanca and Gabriele Quagliarella of Nozomi Networks"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "Path traversal vulnerability in \u201cdeleteFiles\u201d function of Common Service Desktop, a GE HealthCare ultrasound device component"
                }
              ],
              "value": "Path traversal vulnerability in \u201cdeleteFiles\u201d function of Common Service Desktop, a GE HealthCare ultrasound device component"
            }
          ],
          "impacts": [
            {
              "capecId": "CAPEC-126",
              "descriptions": [
                {
                  "lang": "en",
                  "value": "CAPEC-126 Path Traversal"
                }
              ]
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 6.2,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-22",
                  "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2024-05-14T16:32:43.530Z",
            "orgId": "171caf72-b841-4e04-a68e-93493aff2b94",
            "shortName": "GEHC"
          },
          "references": [
            {
              "url": "https://securityupdate.gehealthcare.com/"
            }
          ],
          "source": {
            "discovery": "EXTERNAL"
          },
          "title": "Path traversal vulnerability in \u201cdeleteFiles\u201d function of Common Service Desktop, a GE HealthCare ultrasound device component",
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "171caf72-b841-4e04-a68e-93493aff2b94",
        "assignerShortName": "GEHC",
        "cveId": "CVE-2024-1629",
        "datePublished": "2024-05-14T16:32:43.530Z",
        "dateReserved": "2024-02-19T15:23:21.436Z",
        "dateUpdated": "2024-08-01T18:48:21.479Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

BDU:2024-04328 (CVE-2024-1629)

Vulnerability from fstec – Published: 2024-06-03 – Updated: 2024-06-03 – View on bdu.fstec.ru No remediation information

Title

Уязвимость функции deleteFiles() веб-приложения Common Service Desktop систем ультразвуковой диагностики GE HealthCare, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Summary

Уязвимость функции deleteFiles() веб-приложения Common Service Desktop систем ультразвуковой диагностики GE HealthCare связана с неверным ограничением имени пути к каталогу с ограниченным доступом. Эксплуатация уязвимости может позволить нарушителю получить несанкционированный доступ к защищаемой информации

Severity

4.9 (Medium) CVSS 2.0


                      
                        AV:L/AC:L/Au:N/C:C/I:N/A:N

6.2 (Medium) CVSS 3.0


                      
                        CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-22 - Неверное ограничение имени пути к каталогу с ограниченным доступом («Обход пути»)

Aliases

CVE-2024-1629

References

3 references

URL
https://www.gehealthcare.com/services/lifecycle-management/product-security-por…
https://www.nozominetworks.com/blog/ge-healthcare-vivid-ultrasound-vulnerabilities
https://vuldb.com/ru/?id.264333

Impacted products

42 products from 1 vendor

Vendors

GE Healthcare

Products

Venue Go R2, Venue R1, Venue R2, Voluson Expert 22, Voluson Expert 18, Voluson Expert 16, Voluson SWIFT+, Voluson SWIFT, Voluson SWIFT BT24, Voluson SWIFT+ BT24, Invenia ABUS, Vivid E95, Vivid E90, Vivid E80, Vivid S60N, Vivid S70N, Vivid T8, Vivid T9, Vivid iQ, LOGIQ E10s, LOGIQ E10, LOGIQ Fortis, Voluson Expert 22 BT24, Voluson Expert 18 BT24, Voluson Expert 16 BT24, LOGIQ e R7 (9.2.x), LOGIQ e R7 (9.1.x), LOGIQ He, LOGIQ e R8, LOGIQ e R9, Venue Fit R4, Venue Go R4, Venue R4, Venue R3, Venue Go R3, Venue Fit R3, Versana Essential R2, Versana Premier R1, Versana Premier R2, Versana Active R1, Versana Balance R1, Versana Balance R2

Versions

- (Venue Go R2), - (Venue R1), - (Venue R2), - (Voluson Expert 22), - (Voluson Expert 18), - (Voluson Expert 16), - (Voluson SWIFT+), - (Voluson SWIFT), - (Voluson SWIFT BT24), - (Voluson SWIFT+ BT24), от 2.0 до 2.2.7 включительно (Invenia ABUS), 204 (Vivid E95), 206 (Vivid E95), 206 (Vivid E90), 204 (Vivid E90), 204 (Vivid E80), 206 (Vivid E80), 206 (Vivid S60N), 206 (Vivid S70N), 204 (Vivid S70N), 204 (Vivid S60N), до 206 включительно (Vivid T8), до 206 включительно (Vivid T9), до 206 включительно (Vivid iQ), до 204.117 (Vivid iQ), до 204.117 (Vivid T8), до 204.117 (Vivid T9), до 205.117 (Vivid T9), до 205.117 (Vivid T8), до 205.117 (Vivid iQ), до R3.2.0 (LOGIQ E10s), до R3.2.0 (LOGIQ E10), до R3.2.0 (LOGIQ Fortis), ext 0 (Voluson Expert 22 BT24), ext 0 (Voluson Expert 18 BT24), ext 0 (Voluson Expert 16 BT24), до R9.2.5 включительно (LOGIQ e R7 (9.2.x)), до R9.1.4 включительно (LOGIQ e R7 (9.1.x)), до R9.3.2 включительно (LOGIQ He), до R10.1.3 включительно (LOGIQ e R8), до R11.0.3 включительно (LOGIQ e R9), до 4.3 (Venue Fit R4), до 4.3 (Venue Go R4), до 4.3 (Venue R4), до 3.3 включительно (Venue R3), до 3.3 включительно (Venue Go R3), до 3.3 включительно (Venue Fit R3), до 2.0.3 включительно (Versana Essential R2), до 1.2.8 включительно (Versana Premier R1), до 1.0.16 включительно (Versana Premier R1), до 2.1.8 включительно (Versana Premier R2), до 1.2.2 включительно (Versana Active R1), до 1.0.9 включительно (Versana Active R1), до 1.2.3 включительно (Versana Balance R1), до 1.0.9 включительно (Versana Balance R1), до 2.0.7 включительно (Versana Balance R2)

Product types

Appliance software

Mitigations

Использование рекомендаций: Компенсирующие меры: - ограничение возможности подключения к устройствам через SMB по 2638 TCP-порту (порт сервера базы данных SQL Anywhere); - использование средств межсетевого экранирования и средств обнаружения и предотвращения вторжений (IDS/IPS) для отслеживания подключений к устройству; - ограничение доступа к устройству из внешних сетей (Интернет); - использование виртуальных частных сетей для организации удаленного доступа (VPN); - сегментирование сети для ограничения возможности удалённого доступа к медицинскому оборудованию. Рекомендации производителя: https://www.gehealthcare.com/services/lifecycle-management/product-security-portal/security

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:N/C:C/I:N/A:N",
  "CVSS 3.0": "AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "GE Healthcare",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (Venue Go R2), - (Venue R1), - (Venue R2), - (Voluson Expert 22), - (Voluson Expert 18), - (Voluson Expert 16), - (Voluson SWIFT+), - (Voluson SWIFT), - (Voluson SWIFT BT24), - (Voluson SWIFT+ BT24), \u043e\u0442 2.0 \u0434\u043e 2.2.7 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Invenia ABUS), 204 (Vivid E95), 206 (Vivid E95), 206 (Vivid E90), 204 (Vivid E90), 204 (Vivid E80), 206 (Vivid E80), 206 (Vivid S60N), 206 (Vivid S70N), 204 (Vivid S70N), 204 (Vivid S60N), \u0434\u043e 206 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Vivid T8), \u0434\u043e 206 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Vivid T9), \u0434\u043e 206 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Vivid iQ), \u0434\u043e 204.117 (Vivid iQ), \u0434\u043e 204.117 (Vivid T8), \u0434\u043e 204.117 (Vivid T9), \u0434\u043e 205.117 (Vivid T9), \u0434\u043e 205.117 (Vivid T8), \u0434\u043e 205.117 (Vivid iQ), \u0434\u043e R3.2.0 (LOGIQ E10s), \u0434\u043e R3.2.0 (LOGIQ E10), \u0434\u043e R3.2.0 (LOGIQ Fortis), ext 0 (Voluson Expert 22 BT24), ext 0 (Voluson Expert 18 BT24), ext 0 (Voluson Expert 16 BT24), \u0434\u043e R9.2.5 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (LOGIQ e R7 (9.2.x)), \u0434\u043e R9.1.4 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (LOGIQ e R7 (9.1.x)), \u0434\u043e R9.3.2 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (LOGIQ He), \u0434\u043e R10.1.3 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (LOGIQ e R8), \u0434\u043e R11.0.3 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (LOGIQ e R9), \u0434\u043e 4.3 (Venue Fit R4), \u0434\u043e 4.3 (Venue Go R4), \u0434\u043e 4.3 (Venue R4), \u0434\u043e 3.3 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Venue R3), \u0434\u043e 3.3 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Venue Go R3), \u0434\u043e 3.3 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Venue Fit R3), \u0434\u043e 2.0.3 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Versana Essential R2), \u0434\u043e 1.2.8 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Versana Premier R1), \u0434\u043e 1.0.16 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Versana Premier R1), \u0434\u043e 2.1.8 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Versana Premier R2), \u0434\u043e 1.2.2 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Versana Active R1), \u0434\u043e 1.0.9 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Versana Active R1), \u0434\u043e 1.2.3 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Versana Balance R1), \u0434\u043e 1.0.9 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Versana Balance R1), \u0434\u043e 2.0.7 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Versana Balance R2)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u0447\u0435\u0440\u0435\u0437 SMB \u043f\u043e 2638 TCP-\u043f\u043e\u0440\u0442\u0443 (\u043f\u043e\u0440\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 SQL Anywhere);\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439 (IDS/IPS) \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439 \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443 \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 (\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442);\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (VPN);\n- \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u0442\u0438 \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u043c\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://www.gehealthcare.com/services/lifecycle-management/product-security-portal/security",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "19.02.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "03.06.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "03.06.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-04328",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2024-1629",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Venue Go R2, Venue R1, Venue R2, Voluson Expert 22, Voluson Expert 18, Voluson Expert 16, Voluson SWIFT+, Voluson SWIFT, Voluson SWIFT BT24, Voluson SWIFT+ BT24, Invenia ABUS, Vivid E95, Vivid E90, Vivid E80, Vivid S60N, Vivid S70N, Vivid T8, Vivid T9, Vivid iQ, LOGIQ E10s, LOGIQ E10, LOGIQ Fortis, Voluson Expert 22 BT24, Voluson Expert 18 BT24, Voluson Expert 16 BT24, LOGIQ e R7 (9.2.x), LOGIQ e R7 (9.1.x), LOGIQ He, LOGIQ e R8, LOGIQ e R9, Venue Fit R4, Venue Go R4, Venue R4, Venue R3, Venue Go R3, Venue Fit R3, Versana Essential R2, Versana Premier R1, Versana Premier R2, Versana Active R1, Versana Balance R1, Versana Balance R2",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 deleteFiles() \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Common Service Desktop \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043b\u044c\u0442\u0440\u0430\u0437\u0432\u0443\u043a\u043e\u0432\u043e\u0439 \u0434\u0438\u0430\u0433\u043d\u043e\u0441\u0442\u0438\u043a\u0438 GE HealthCare, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0432\u0435\u0440\u043d\u043e\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0438\u043c\u0435\u043d\u0438 \u043f\u0443\u0442\u0438 \u043a \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0443 \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c (\u00ab\u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438\u00bb) (CWE-22)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 deleteFiles() \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Common Service Desktop \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043b\u044c\u0442\u0440\u0430\u0437\u0432\u0443\u043a\u043e\u0432\u043e\u0439 \u0434\u0438\u0430\u0433\u043d\u043e\u0441\u0442\u0438\u043a\u0438 GE HealthCare \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u0438\u043c\u0435\u043d\u0438 \u043f\u0443\u0442\u0438 \u043a \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0443 \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.gehealthcare.com/services/lifecycle-management/product-security-portal/security\nhttps://www.nozominetworks.com/blog/ge-healthcare-vivid-ultrasound-vulnerabilities\nhttps://vuldb.com/ru/?id.264333",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-22",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,9)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,2)"
}

EUVD-2026-1725

European Vulnerability Database identifier assigned by ENISA

Reserved

2026-10-02 05:55

Assigner

ENISA

Alias of

a CVE record, shown under related vulnerabilities. This identifier carries no description, severity or references of its own: they belong to that CVE.

JSON

To clipboard

{
  "assigner": "ENISA",
  "date_reserved": "2026-10-02T05:55:26.763688+00:00",
  "id": "EUVD-2026-1725"
}

FKIE_CVE-2024-1629

Vulnerability from fkie_nvd - Published: 2024-05-14 17:15 - Updated: 2026-06-17 07:04

Severity

6.2 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Summary

Path traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component

References

	URL	Tags
	171caf72-b841-4e04-a68e-93493aff2b94	https://securityupdate.gehealthcare.com/
	af854a3a-2127-422b-91ae-364da2661108	https://securityupdate.gehealthcare.com/

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Venue",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "status": "affected",
              "version": "R1"
            },
            {
              "status": "affected",
              "version": "R2"
            },
            {
              "lessThanOrEqual": "R3.3",
              "status": "affected",
              "version": "R3",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "R4.3",
              "status": "affected",
              "version": "R4",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Venue Go",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "status": "affected",
              "version": "R2"
            },
            {
              "lessThanOrEqual": "R3.3",
              "status": "affected",
              "version": "R3",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "R4.3",
              "status": "affected",
              "version": "R4",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Venue Fit",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "lessThanOrEqual": "R3.3",
              "status": "affected",
              "version": "R3",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "R4.3",
              "status": "affected",
              "version": "R4",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "LOGIQ e",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "lessThanOrEqual": "R9.1.4",
              "status": "affected",
              "version": "R7",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "R10.1.3",
              "status": "affected",
              "version": "R8",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "R11.0.3",
              "status": "affected",
              "version": "R9",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "LOGIQ He",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "lessThanOrEqual": "R9.3.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Vivid E",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "lessThan": "206",
              "status": "affected",
              "version": "E95",
              "versionType": "custom"
            },
            {
              "lessThan": "206",
              "status": "affected",
              "version": "E90",
              "versionType": "custom"
            },
            {
              "lessThan": "206",
              "status": "affected",
              "version": "E80",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Vivid S",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "lessThan": "206",
              "status": "affected",
              "version": "70N",
              "versionType": "custom"
            },
            {
              "lessThan": "206",
              "status": "affected",
              "version": "60N",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Vivid T",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "lessThan": "206",
              "status": "affected",
              "version": "T8",
              "versionType": "custom"
            },
            {
              "lessThan": "206",
              "status": "affected",
              "version": "T9",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Vivid iq",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "lessThan": "206",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Voluson Expert 16",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "status": "affected",
              "version": "0"
            },
            {
              "status": "affected",
              "version": "BT24"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Voluson Expert 18",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "status": "affected",
              "version": "0"
            },
            {
              "status": "affected",
              "version": "BT24"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Voluson Expert 22",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "status": "affected",
              "version": "0"
            },
            {
              "status": "affected",
              "version": "BT24"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Voluson SWIFT",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "status": "affected",
              "version": "0"
            },
            {
              "status": "affected",
              "version": "BT24"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "LOGIQ E10",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "lessThan": "R3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "LOGIQ E10s",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "lessThan": "R3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "LOGIQ Fortis",
          "vendor": "GE HealthCare",
          "versions": [
            {
              "lessThan": "R3.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "171caf72-b841-4e04-a68e-93493aff2b94"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Path traversal vulnerability in \u201cdeleteFiles\u201d function of Common Service Desktop, a GE HealthCare ultrasound device component"
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de Path Traversal en la funci\u00f3n \"deleteFiles\" de Common Service Desktop, un componente del dispositivo de ultrasonido de GE HealthCare"
    }
  ],
  "id": "CVE-2024-1629",
  "lastModified": "2026-06-17T07:04:39.450",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 6.2,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 2.5,
        "impactScore": 3.6,
        "source": "171caf72-b841-4e04-a68e-93493aff2b94",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-1629",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2024-05-16T16:09:37.900864Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2024-05-14T17:15:29.310",
  "references": [
    {
      "source": "171caf72-b841-4e04-a68e-93493aff2b94",
      "url": "https://securityupdate.gehealthcare.com/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://securityupdate.gehealthcare.com/"
    }
  ],
  "sourceIdentifier": "171caf72-b841-4e04-a68e-93493aff2b94",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ],
      "source": "171caf72-b841-4e04-a68e-93493aff2b94",
      "type": "Secondary"
    }
  ]
}

GHSA-425C-W8PX-7Q9C

Vulnerability from github – Published: 2024-05-14 18:31 – Updated: 2024-05-14 18:31

Details

Path traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component

Severity

6.2 (Medium)


                  
                    CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-1629"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-22"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-05-14T17:15:29Z",
    "severity": "MODERATE"
  },
  "details": "Path traversal vulnerability in \u201cdeleteFiles\u201d function of Common Service Desktop, a GE HealthCare ultrasound device component",
  "id": "GHSA-425c-w8px-7q9c",
  "modified": "2024-05-14T18:31:02Z",
  "published": "2024-05-14T18:31:02Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1629"
    },
    {
      "type": "WEB",
      "url": "https://securityupdate.gehealthcare.com"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2024-1629

Vulnerability from gsd - Updated: 2024-02-20 06:02

Details

** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Aliases

CVE-2024-1629

JSON

To clipboard

{
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2024-1629"
      ],
      "id": "GSD-2024-1629",
      "modified": "2024-02-20T06:02:28.021529Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2024-1629",
        "STATE": "RESERVED"
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
          }
        ]
      }
    }
  }
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2024-1629 (GCVE-0-2024-1629)

BDU:2024-04328 (CVE-2024-1629)

EUVD-2026-1725

FKIE_CVE-2024-1629

GHSA-425C-W8PX-7Q9C

GSD-2024-1629

Tags

Sightings

Nomenclature

Related by attack behaviour