Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| GE HealthCare | Venue | unaffected |
|
|||||||||||||||
| GE HealthCare | Venue Go | unaffected |
|
|||||||||||||||
| GE HealthCare | Venue Fit | unaffected |
|
|||||||||||||||
| GE HealthCare | LOGIQ e | unaffected |
|
|||||||||||||||
| GE HealthCare | LOGIQ He | unaffected |
|
|||||||||||||||
| GE HealthCare | Vivid E | unaffected |
|
|||||||||||||||
| GE HealthCare | Vivid S | unaffected |
|
|||||||||||||||
| GE HealthCare | Vivid T | unaffected |
|
|||||||||||||||
| GE HealthCare | Vivid iq | unaffected |
|
|||||||||||||||
| GE HealthCare | Voluson Expert 16 | unaffected |
|
|||||||||||||||
| GE HealthCare | Voluson Expert 18 | unaffected |
|
|||||||||||||||
| GE HealthCare | Voluson Expert 22 | unaffected |
|
|||||||||||||||
| GE HealthCare | Voluson SWIFT | unaffected |
|
|||||||||||||||
| GE HealthCare | Invenia ABUS 2.0 | unaffected |
|
|||||||||||||||
| GE HealthCare | LOGIQ E10 | unaffected |
|
|||||||||||||||
| GE HealthCare | LOGIQ E10s | unaffected |
|
|||||||||||||||
| GE HealthCare | LOGIQ Fortis | unaffected |
|
No data.
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-17368 | OS command injection vulnerabilities in GE HealthCare ultrasound devices |
| Link | Providers |
|---|---|
| https://securityupdate.gehealthcare.com/ |
|
No history.
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: GEHC
Published:
Updated: 2024-08-01T18:48:21.580Z
Reserved: 2024-02-19T15:23:20.113Z
Link: CVE-2024-1628
Vulnrichment
Updated: 2024-08-01T18:48:21.580Z
NVD
Status : Deferred
Published: 2024-05-14T16:16:00.470
Modified: 2026-06-17T07:04:39.297
Link: CVE-2024-1628
Redhat
No data.
OpenCVE Enrichment
No data.
-
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')