CVE-2024-1486: Elevation of privileges via misconfigured access control list in GE HealthCare ultrasound devices
Published May 14, 2024
·Updated
Elevation of privileges via misconfigured access control list in GE HealthCare ultrasound devices
Affected Software
1 affected component
GE HealthCare ultrasound devices
Event History
May 14, 2024
CVE Published
via MITRE·03:10 PM
Data Sourced
via MITRE·03:10 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-1486?
CVE-2024-1486 has been classified as a high severity vulnerability due to its potential for allowing elevation of privileges.
2
How do I fix CVE-2024-1486?
To fix CVE-2024-1486, ensure that the access control list for the affected GE HealthCare ultrasound devices is properly configured.
3
What systems are affected by CVE-2024-1486?
CVE-2024-1486 affects GE HealthCare ultrasound devices with misconfigured access control lists.
4
What kind of attack does CVE-2024-1486 allow?
CVE-2024-1486 allows an attacker to elevate their privileges on the affected ultrasound devices.
5
Is there a known exploitation method for CVE-2024-1486?
Currently, details on specific exploitation methods for CVE-2024-1486 are not publicly disclosed, but it revolves around access control misconfigurations.