CVE-2020-36548

7.8 highEPSS 0.2%

High (7.8) in ge voluson s8 firmware. EPSS 0.2% chance of exploitation in the next 30 days.

A vulnerability classified as problematic has been found in GE Voluson S8. Affected is the file /uscgi-bin/users.cgi of the Service Browser. The manipulation leads to improper authentication and elevated access possibilities. It is possible to launch the attack on the local host.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2022-06-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ge:voluson_s8_firmware

References

https://vuldb.com/?id.129834
https://www.scip.ch/?news.20200701
https://vuldb.com/?id.129834
https://www.scip.ch/?news.20200701

Check your stack JSON