Silex Technology SX-500/SD-320AN or GE Healthcare MobileLink (Update B)
Authentication is not verified when making certain POST requests, which may allow attackers to modify system settings.CVE-2018-6020 has been assigned to this vulnerability. A CVSS v3 base score of 6.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L). A system call parameter is not properly sanitized, which may allow remote code execution.CVE-2018-6021 has been assigned to this vulnerability. A CVSS v3 base score of 7.4 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L).