PT-2022-8998 · Microsoft+1 · Windows Xp+1

Marc Ruef + 1 · Published 2022-06-17 · Updated 2022-06-30 · CVE-2020-36549

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GE Voluson S8 (affected versions not specified) Windows XP (affected versions not specified)

Description A critical issue was found in the affected software, related to the underlying Windows XP operating system. The lack of patches may increase the attack surface. To exploit this issue, access to the local network is required.

Recommendations For GE Voluson S8, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Windows XP, consider applying all available patches to reduce the attack surface. Restrict access to the local network to minimize the risk of exploitation.

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2020-36549

Affected Products

Ge Voluson S8

Windows Xp

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-36549 · Security Note
• https://t.me/cibsecurity/44732 · Telegram Post
• https://vuldb.com/?id.129835 · Note
• https://scip.ch/?news.20200701 · Note