Andrea Palanca and Gabriele Quagliarella of Nozomi Networks

Improper authentication could lead to session hijacking

Allocation of resources without limits could lead to denial of service

Insufficient entropy vulnerability could lead to authentication bypass

Missing Authentication for Critical Function

Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component

Elevation of privileges via misconfigured access control list in GE HealthCare ultrasound devices

Improper input validation could lead to denial of service

Improper neutralizataion of input could lead to execution of arbitrary code

Elevation of privilege vulnerability in GE HealthCare EchoPAC products

Insufficiently protected credentials in GE HealthCare EchoPAC products