CVE-2020-36548CWE-287

GE Voluson S8 Service Browser users.cgi improper authentication

Medium · published June 17, 2022

CVSS v3.1
5.9
EPSS
0%
Percentile
12.7
In the wild
Unconfirmed
What it is

A vulnerability classified as problematic has been found in GE Voluson S8. Affected is the file /uscgi-bin/users.cgi of the Service Browser. The manipulation leads to improper authentication and elevated access possibilities. It is possible to launch the attack on the local host.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00227 · 12.7th percentile
Weakness
CWE-287 · Improper Authentication
Published
2022-06-17T13:10Z
EPSS history
Timeline
  • 17 JUN 13:10Z
    GE Voluson S8 Service Browser users.cgi improper authentication
    cvelistv5