7.2
CWE
20 693
Advisory Published
Updated

CVE-2020-6977: Input Validation

First published: Thu Feb 20 2020(Updated: )

A restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of affected devices. Specially crafted inputs can allow the user to escape the restricted environment, resulting in access to the underlying operating system. Affected devices include the following GE Ultrasound Products: Vivid products - all versions; LOGIQ - all versions not including LOGIQ 100 Pro; Voluson - all versions; Versana Essential - all versions; Invenia ABUS Scan station - all versions; Venue - all versions not including Venue 40 R1-3 and Venue 50 R4-5

Credit: ics-cert@hq.dhs.gov

Affected SoftwareAffected VersionHow to fix
Ge Vivid E95 Firmware
Ge Vivid E95
Ge Vivid E90 Firmware
Ge Vivid E90
Ge Vivid S70n Firmware
Ge Vivid S70n
Ge Vivid T8 Firmware
Ge Vivid T8
Ge Vivid T9 Firmware
Ge Vivid T9
Ge Vivid Iq Firmware
Ge Vivid Iq
Ge Logiq E10 Firmware
Ge Logiq E10
Ge Logiq E9 Firmware
Ge Logiq E9
Ge Logiq S8 Firmware
Ge Logiq S8
Ge Logiq S7 Firmware
Ge Logiq S7
Ge Logiq P9 Firmware
Ge Logiq P9
Ge Logiq E9 With Xdclear Firmware
Ge Logiq E9 With Xdclear
Ge Voluson Firmware
Ge Voluson
Ge Versana Essential Firmware
Ge Versana Essential
Ge Invenia Abus Scan Station Firmware
Ge Invenia Abus Scan Station
Ge Venue Go Firmware
Ge Venue Go

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203