CVE-2020-6977: Ge Invenia Abus Scan Station Firmware

Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of affected devices. Specially crafted inputs can allow the user to escape the restricted environment, resulting in access to the underlying operating system. Affected devices include the following GE Ultrasound Products: Vivid products - all versions; LOGIQ - all versions not including LOGIQ 100 Pro; Voluson - all versions; Versana Essential - all versions; Invenia ABUS Scan station - all versions; Venue - all versions not including Venue 40 R1-3 and Venue 50 R4-5

Affected products

• Ge Invenia Abus Scan Station Firmware: any version
• Ge Logiq e10 Firmware: any version
• Ge Logiq e9 Firmware: any version
• Ge Logiq e9 With Xdclear Firmware: any version
• Ge Logiq p9 Firmware: any version
• Ge Logiq s7 Firmware: any version
• Ge Logiq s8 Firmware: any version
• Ge Venue Go Firmware: any version
• Ge Versana Essential Firmware: any version
• Ge Vivid e90 Firmware: any version
• Ge Vivid e95 Firmware: any version
• Ge Vivid Iq Firmware: any version
• Ge Vivid s70n Firmware: any version
• Ge Vivid t8 Firmware: any version
• Ge Vivid t9 Firmware: any version
• Ge Voluson Firmware: any version

Published 2020-02-20. Last modified 2026-06-17.