CVE-2024-1630: Ge Healthcare Logiq E

High severity, CVSS 7.7. EPSS: 0.3% chance of exploitation in the next 30 days.

Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component

Affected products

  • Ge Healthcare Logiq E: from R7, up to and including R9.1.4; from R8, up to and including R10.1.3; from R9, up to and including R11.0.3
  • Ge Healthcare Logiq e10: before R3.2.0 (fixed in R3.2.0)
  • Ge Healthcare Logiq e10s: before R3.2.0 (fixed in R3.2.0)
  • Ge Healthcare Logiq Fortis: before R3.2.0 (fixed in R3.2.0)
  • Ge Healthcare Logiq He: up to and including R9.3.1
  • Ge Healthcare Venue: version R1 only; version R2 only; from R3, up to and including R3.3; from R4, up to and including R4.3
  • Ge Healthcare Venue Fit: from R3, up to and including R3.3; from R4, up to and including R4.3
  • Ge Healthcare Venue Go: version R2 only; from R3, up to and including R3.3; from R4, up to and including R4.3
  • Ge Healthcare Vivid E: from E95, before 206 (fixed in 206); from E90, before 206 (fixed in 206); from E80, before 206 (fixed in 206)
  • Ge Healthcare Vivid Iq: before 206 (fixed in 206)
  • Ge Healthcare Vivid T: from T8, before 206 (fixed in 206); from T9, before 206 (fixed in 206)
  • Ge Healthcare Voluson Expert 16: version 0 only
  • Ge Healthcare Voluson Expert 18: version 0 only
  • Ge Healthcare Voluson Expert 22: version 0 only
  • Ge Healthcare Voluson Swift: version 0 only
  • Gehealthcare Logiq e10: before r3.2.0 (fixed in r3.2.0)
  • Gehealthcare Logiq e10s: before r3.2.0 (fixed in r3.2.0)
  • Gehealthcare Logiq E Firmware: from r7, up to and including r9.1.4; from r8, up to and including r10.1.3; from r9, up to and including r11.0.3
  • Gehealthcare Logiq Fortis: before r3.2.0 (fixed in r3.2.0)
  • Gehealthcare Logiq He Firmware: up to and including r9.3.1
  • Gehealthcare Venue Firmware: version r1 only; version r2 only; from r3, up to and including r3.3; from r4, up to and including r4.3
  • Gehealthcare Venue Fit Firmware: from r3, up to and including r3.3; from r4, up to and including r4.3
  • Gehealthcare Venue Go Firmware: version r2 only; from r3, up to and including r3.3; from r4, up to and including r4.3
  • Gehealthcare Vivid E Firmware: from e95, before 206 (fixed in 206); from e90, before 206 (fixed in 206); from e80, before 206 (fixed in 206)
  • Gehealthcare Vivid Iq Firmware: before 206 (fixed in 206)
  • and 5 more

Published 2024-05-14. Last modified 2026-06-17.