CVE-2020-6977 - CVE House
Back to Database
Status published Medium CVE-2020-6977

A restricted desktop environment escape vulnerability exists in the Kiosk...

Vulnerability Description

A restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of affected devices. Specially crafted inputs can allow the user to escape the restricted environment, resulting in access to the underlying operating system. Affected devices include the following GE Ultrasound Products: Vivid products - all versions; LOGIQ - all versions not including LOGIQ 100 Pro; Voluson - all versions; Versana Essential - all versions; Invenia ABUS Scan station - all versions; Venue - all versions not including Venue 40 R1-3 and Venue 50 R4-5

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-6977

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

GE Ultrasound Products
Vulnerable Versions:
Vivid products - all versions, LOGIQ - all versions not including LOGIQ 100 Pro, Voluson - all versions, Versana Essential - all versions, Invenia ABUS Scan station - all versions, Venue - all versions not including Venue 40 R1-3 and Venue 50 R4-5

Timeline

Official Publish: February 20th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)