What’s Vulnerable › Vulnerabilities

CVE-2020-6977

• Severity: medium (CVSS 6.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-02-20 · updated 2026-06-17
• Weakness: CWE-693

Description

A restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of affected devices. Specially crafted inputs can allow the user to escape the restricted environment, resulting in access to the underlying operating system. Affected devices include the following GE Ultrasound Products: Vivid products - all versions; LOGIQ - all versions not including LOGIQ 100 Pro; Voluson - all versions; Versana Essential - all versions; Invenia ABUS Scan station - all versions; Venue - all versions not including Venue 40 R1-3 and Venue 50 R4-5

Affected products

• GE Invenia Abus Scan Station Firmware: all versions
• GE Logiq E10 Firmware: all versions
• GE Logiq E9 Firmware: all versions
• GE Logiq E9 With Xdclear Firmware: all versions
• GE Logiq P9 Firmware: all versions
• GE Logiq S7 Firmware: all versions
• GE Logiq S8 Firmware: all versions
• GE Venue Go Firmware: all versions
• GE Versana Essential Firmware: all versions
• GE Vivid E90 Firmware: all versions
• GE Vivid E95 Firmware: all versions
• GE Vivid Iq Firmware: all versions
• GE Vivid S70N Firmware: all versions
• GE Vivid T8 Firmware: all versions
• GE Vivid T9 Firmware: all versions
• GE Voluson Firmware: all versions

References

• https://www.us-cert.gov/ics/advisories/icsma-20-049-02
• https://www.us-cert.gov/ics/advisories/icsma-20-049-02

Get alerted when CVE-2020-6977 or the next vulnerability affects your stack