CVE-2020-36547

MEDIUM

GE Voluson S8 Firmware - Use of Hard-coded Credentials in Service Browser

Title source: llm

Description

A vulnerability was found in GE Voluson S8. It has been rated as critical. This issue affects the Service Browser which itroduces hard-coded credentials. Attacking locally is a requirement. It is recommended to change the configuration settings.

References (2)

Core 2

Core References

Various Sources x_refsource_misc

https://www.scip.ch/?news.20200701

Permissions Required, VDB Entry x_refsource_misc

https://vuldb.com/?id.129833

Scores

CVSS v3 5.9

EPSS 0.0022

EPSS Percentile 12.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-798

Status published

Products (1)

ge/voluson_s8_firmware

Published Jun 17, 2022

Tracked Since Feb 18, 2026