CVE-2020-36549

HIGH

GE Voluson S8 Firmware - Improper Privilege Management

Title source: llm

Description

A vulnerability classified as critical was found in GE Voluson S8. Affected is the underlying Windows XP operating system. Missing patches might introduce an excessive attack surface. Access to the local network is required for this attack to succeed.

References (2)

Core 2

Core References

Various Sources x_refsource_misc

https://www.scip.ch/?news.20200701

Permissions Required, VDB Entry x_refsource_misc

https://vuldb.com/?id.129835

Scores

CVSS v3 8.8

EPSS 0.0023

EPSS Percentile 13.5%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-269

Status published

Products (1)

ge/voluson_s8_firmware

Published Jun 17, 2022

Tracked Since Feb 18, 2026