CRITICAL🇵🇱 Wersja polska

CVE-2020-6965

CVSS 9.9v3.1pub. 2020-01-24upd. 2024-11-21

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, B450 Version 2.X, B650 Version 1.X, B650 Version 2.X, B850 Version 1.X, B850 Version 2.X, a vulnerability in the software update mechanism allows an authenticated attacker to upload arbitrary files on the system through a crafted update package.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

  • Gehealthcare Apexpro Telemetry Server

    HW
    Gehealthcare
    all versions

  • Gehealthcare Apexpro Telemetry Server Firmware

    OS
    Gehealthcare
    ≤ 4.2

  • Gehealthcare Carescape B450 Monitor

    HW
    Gehealthcare
    all versions

  • Gehealthcare Carescape B450 Monitor Firmware

    OS
    Gehealthcare
    2.0

  • Gehealthcare Carescape B650 Monitor

    HW
    Gehealthcare
    all versions

  • Gehealthcare Carescape B650 Monitor Firmware

    OS
    Gehealthcare
    1.02.0

  • Gehealthcare Carescape B850 Monitor

    HW
    Gehealthcare
    all versions

  • Gehealthcare Carescape B850 Monitor Firmware

    OS
    Gehealthcare
    1.02.0

  • Gehealthcare Carescape Central Station Mai700

    HW
    Gehealthcare
    all versions

  • Gehealthcare Carescape Central Station Mai700 Firmware

    OS
    Gehealthcare
    1.0

  • Gehealthcare Carescape Central Station Mas700

    HW
    Gehealthcare
    all versions

  • Gehealthcare Carescape Central Station Mas700 Firmware

    OS
    Gehealthcare
    1.0

  • Gehealthcare Carescape Telemetry Server Mp100r

    HW
    Gehealthcare
    all versions

  • Gehealthcare Carescape Telemetry Server Mp100r Firmware

    OS
    Gehealthcare
    ≤ 4.2

  • Gehealthcare Clinical Information Center Mp100d

    HW
    Gehealthcare
    all versions

  • Gehealthcare Clinical Information Center Mp100d Firmware

    OS
    Gehealthcare
    4.05.0

  • Gehealthcare Clinical Information Center Mp100r

    HW
    Gehealthcare
    all versions

  • Gehealthcare Clinical Information Center Mp100r Firmware

    OS
    Gehealthcare
    4.05.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2020-6961CRITICAL10.0PL ✓same product

Ujawnienie klucza prywatnego SSH w produktach GE Healthcare

CVE-2020-6962CRITICAL10.0PL ✓same product

RCE poprzez brak walidacji danych wejściowych w GE Healthcare — systemy telemetryczne

CVE-2020-6963CRITICAL10.0PL ✓same product

GE Healthcare: zakodowane dane SMB umożliwiające RCE

CVE-2020-6966CRITICAL10.0PL ✓same product

Słabe szyfrowanie RDP umożliwia RCE w urządzeniach GE Healthcare

CVE-2020-6964HIGH8.6same product

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Informat...