CVE-2020-36548: GE Voluson S8 Service Browser users.cgi improper authentication

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-06-17 · updated 2026-06-17
Weakness: CWE-287

Description

A vulnerability classified as problematic has been found in GE Voluson S8. Affected is the file /uscgi-bin/users.cgi of the Service Browser. The manipulation leads to improper authentication and elevated access possibilities. It is possible to launch the attack on the local host.

Affected products

GE Voluson S8: all versions

References

https://vuldb.com/?id.129834
https://www.scip.ch/?news.20200701
https://vuldb.com/?id.129834
https://www.scip.ch/?news.20200701

Get alerted when CVE-2020-36548 or the next vulnerability affects your stack