CVE-2020-6961

Katalog CVE

CVSS 10.0 · Critical EPSS 1,6%

Kerentanan Plaintext Storage of a Password pada gehealthcare apexpro telemetry server firmware, gehealthcare carescape central station mai700 firmware +4 lainnya. Skor CVSS 3.1 10.0 (Critical) menurut NVD.

Deskripsi (NVD)

In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Telemetry Server Version 4.3, CARESCAPE Central Station (CSCS) Versions 1.X, a vulnerability exists in the affected products that could allow an attacker to obtain access to the SSH private key in configuration files.

Rincian

Terbit di NVD

24 Januari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

10.0 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-256: Plaintext Storage of a Password
CWE-522: Insufficiently Protected Credentials

EPSS (30 hari)

1,6% peluang dieksploitasi; lebih tinggi dari 75,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.us-cert.gov/ics/advisories/icsma-20-023-01 advisory pihak ketiga · pemerintah AS
• https://www3.gehealthcare.com/~/media/downloads/us/support/site-planning/site-readiness/gehc-gateway_project_i... product