CVE-2020-36548

Summary

A vulnerability classified as problematic has been found in GE Voluson S8. Affected is the file /uscgi-bin/users.cgi of the Service Browser. The manipulation leads to improper authentication and elevated access possibilities. It is possible to launch the attack on the local host.

Affected Software

Weaknesses

• CWE-287: CWE-287 Improper Authentication

ADP Enrichment

CVE Program Container

Additional References

• https://www.scip.ch/?news.20200701
• https://vuldb.com/?id.129834

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.scip.ch/?news.20200701
• https://vuldb.com/?id.129834

• ←Previous
• Next→