CVE-2024-1486: Ge Healthcare Invenia Abus
High severity, CVSS 7.4. EPSS: 0.2% chance of exploitation in the next 30 days.
Elevation of privileges via misconfigured access control list in GE HealthCare ultrasound devices
Affected products
- Ge Healthcare Invenia Abus: version 1.2.3 only
- Ge Healthcare Invenia Abus 2.0: before 2.2.9 (fixed in 2.2.9)
- Ge Healthcare Logiq E: from R7, up to and including R9.1.4; from R8, up to and including R10.1.3; from R9, up to and including R11.0.2
- Ge Healthcare Logiq He: up to and including R9.3.1
- Ge Healthcare Venue: version R1 only; version R2 only; from R3, up to and including R3.3; from R4, up to and including R4.2
- Ge Healthcare Venue Fit: from R3, up to and including R3.3; from R4, up to and including R4.2
- Ge Healthcare Venue Go: version R2 only; from R3, up to and including R3.3; from R4, up to and including R4.2
- Ge Healthcare Vivid E: from E95, before 206 (fixed in 206); from E90, before 206 (fixed in 206); from E80, before 206 (fixed in 206); from E9 113.2, up to and including 113.2
- Ge Healthcare Vivid Iq: before 206 (fixed in 206)
- Ge Healthcare Vivid S: from 70N, before 206 (fixed in 206); from 60N, before 206 (fixed in 206)
- Ge Healthcare Vivid T: from T8, before 206 (fixed in 206); from T9, before 206 (fixed in 206)
- Gehealthcare Invenia Abus 2.0 Firmware: before 2.2.9 (fixed in 2.2.9)
- Gehealthcare Invenia Abus Firmware: version 1.2.3 only
- Gehealthcare Logiq E Firmware: from R7, up to and including R9.1.4; from R8, up to and including R10.1.3; from R9, up to and including R11.0.2
- Gehealthcare Logiq He Firmware: up to and including R9.3.1
- Gehealthcare Venue Firmware: version R1 only; version R2 only; from R3, up to and including R3.3; from R4, up to and including R4.2
- Gehealthcare Venue Fit Firmware: from R3, up to and including R3.3; from R4, up to and including R4.2
- Gehealthcare Venue Go Firmware: version R2 only; from R3, up to and including R3.3; from R4, up to and including R4.2
- Gehealthcare Vivid E Firmware: from E95, before 206 (fixed in 206); from E90, before 206 (fixed in 206); from E80, before 206 (fixed in 206); from E9 113.2, up to and including 113.2
- Gehealthcare Vivid Iq Firmware: before 206 (fixed in 206)
- Gehealthcare Vivid S Firmware: from 70N, before 206 (fixed in 206); from 60N, before 206 (fixed in 206)
- Gehealthcare Vivid T Firmware: from T8, before 206 (fixed in 206); from T9, before 206 (fixed in 206)
Published 2024-05-14. Last modified 2026-06-17.