Vulnerability · Published Jun 17, 2022 · Assigned by icscert
CVE-2020-36549GE Voluson S8 Windows Operating System Patches privileges management
High 8.8
In plain English
A high-severity privilege mismanagement in Voluson S8 from GE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.2%top 85.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability classified as critical was found in GE Voluson S8. Affected is the underlying Windows XP operating system. Missing patches might introduce an excessive attack surface. Access to the local network is required for this attack to succeed.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| GE | Voluson S8 | n/a |
Weakness: CWE-269 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://www.scip.ch/?news.20200701 x_refsource_MISC
- https://vuldb.com/?id.129835 x_refsource_MISC