CVE-2024-1630
Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component
Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component
Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component
- Record
CVE-2024-1630- CVSS 3.1
- 7.7 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
EUVDEUVD-2024-17370
Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component
- Record
EUVD-2024-17370- CVSS 3.1
- 7.7 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gwj2-vqgr-4qxf
Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE...
Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component
- Record
GHSA-gwj2-vqgr-4qxf- CVSS 3.1
- 7.7 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
NVD
Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component
- Record
CVE-2024-1630- CVSS 3.1
- 7.7 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
Affected products
- ge healthcare logiq e
- ge healthcare logiq e10
- ge healthcare logiq e10s
- ge healthcare logiq fortis
- ge healthcare logiq he
- ge healthcare venue
- ge healthcare venue fit
- ge healthcare venue go
- ge healthcare vivid e
- ge healthcare vivid iq
- ge healthcare vivid t
- ge healthcare voluson expert 16
Show 18 moreShow less
- ge healthcare voluson expert 18
- ge healthcare voluson expert 22
- ge healthcare voluson swift
- gehealthcare logiq e10
- gehealthcare logiq e10s
- gehealthcare logiq e firmware
- gehealthcare logiq fortis
- gehealthcare logiq he firmware
- gehealthcare venue firmware
- gehealthcare venue fit firmware
- gehealthcare venue go firmware
- gehealthcare vivid e firmware
- gehealthcare vivid iq firmware
- gehealthcare vivid t firmware
- gehealthcare voluson expert 16
- gehealthcare voluson expert 18
- gehealthcare voluson expert 22
- gehealthcare voluson swift
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-1630 is a high vulnerability (CVSS 7.7) in Ge Healthcare Logiq E, published May 14, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 21st percentile. No source names a fixed version.