PT-2022-8997 · Ge · Ge Voluson S8

Marc Ruef + 1 · Published 2022-06-17 · Updated 2022-06-30 · CVE-2020-36548

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GE Voluson S8 (affected versions not specified)

Description A vulnerability has been found in the file /uscgi-bin/users.cgi of the Service Browser, leading to improper authentication and elevated access possibilities. The attack can be launched on the local host.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2020-36548

Affected Products

Ge Voluson S8

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-36548 · Security Note
• https://scip.ch/?news.20200701 · Note
• https://t.me/cibsecurity/44720 · Telegram Post
• https://vuldb.com/?id.129834 · Note