Advisories · Technology

GE HealthCare EchoPAC Turnkey.

Every CVE that names GE HealthCare EchoPAC Turnkey among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-27110 CVE record

CVSS 8.4 High

Elevation of privilege vulnerability in GE HealthCare EchoPAC products
- GE HealthCare EchoPAC Software Only
- GE HealthCare ImageVault
- Privilege escalation
Not analysed yet 14 May 2024
CVE-2024-27109 CVE record

CVSS 7.6 High

Insufficiently protected credentials in GE HealthCare EchoPAC products
- GE HealthCare EchoPAC Software Only
- GE HealthCare ImageVault
- Hard-coded credentials
Not analysed yet 14 May 2024
CVE-2024-27108 CVE record

CVSS 6.8 Medium

Non privileged access to critical file vulnerability in GE HealthCare EchoPAC products
- GE HealthCare EchoPAC Software Only
- GE HealthCare ImageVault
- Broken access control
Not analysed yet 14 May 2024
CVE-2024-27107 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Weak account password in GE HealthCare EchoPAC products
- GE HealthCare EchoPAC Software Only
- GE HealthCare ImageVault
- Hard-coded credentials
Not analysed yet 14 May 2024
CVE-2024-27106 CVE record

CVSS 5.7 Medium

Vulnerable data in transit in GE HealthCare EchoPAC products
- GE HealthCare EchoPAC Software Only
- GE HealthCare ImageVault
- Weak cryptography or TLS
Not analysed yet 14 May 2024