CVE:CVE-2020-6977
CNNVD:CNNVD-202002-932
GE LOGIQ等都是美国通用电气（GE）公司的一套超声波诊断解决方案。
多款GE产品中的Kiosk Mode功能存在安全漏洞。攻击者可借助特制的输入利用该漏洞绕过被限制的环境，访问底层操作系统。以下产品及版本受到影响：Vivid products（全部版本）；LOGIQ（全部版本，不仅包括LOGIQ 100 Pro）；Voluson（全部版本）；Versana Essential（全部版本）；Invenia ABUS Scan station（全部版本）；Venue（全部版本，不仅包括Venue 40 R1-3和Venue 50 R4-5）。
solution:Upgrade ge vivid_e95_firmware to a higher version than *; Upgrade ge vivid_e90_firmware to a higher version than *; Upgrade ge vivid_s70n_firmware to a higher version than *; Upgrade ge vivid_t8_firmware to a higher version than *; Upgrade ge vivid_t9_firmware to a higher version than *; Upgrade ge vivid_iq_firmware to a higher version than *; Upgrade ge logiq_e10_firmware to a higher version than *; Upgrade ge logiq_e9_firmware to a higher version than *; Upgrade ge logiq_s8_firmware to a higher version than *; Upgrade ge logiq_s7_firmware to a higher version than *; Upgrade ge logiq_p9_firmware to a higher version than *; Upgrade ge logiq_e9_with_xdclear_firmware to a higher version than *; Upgrade ge voluson_firmware to a higher version than *; Upgrade ge versana_essential_firmware to a higher version than *; Upgrade ge invenia_abus_scan_station_firmware to a higher version than *; Upgrade ge venue_go_firmware to a higher version than *