CVE-2020-6963

Katalog CVE

CVSS 10.0 · Critical EPSS 2,7%

Kerentanan Use of Hard-coded Credentials pada gehealthcare apexpro telemetry server firmware, gehealthcare carescape central station mai700 firmware +4 lainnya. Skor CVSS 3.1 10.0 (Critical) menurut NVD.

Deskripsi (NVD)

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, the affected products utilized hard coded SMB credentials, which may allow an attacker to remotely execute arbitrary code.

Rincian

Terbit di NVD

24 Januari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

10.0 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-798: Use of Hard-coded Credentials
CWE-20: Improper Input Validation

EPSS (30 hari)

2,7% peluang dieksploitasi; lebih tinggi dari 85,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.us-cert.gov/ics/advisories/icsma-20-023-01 advisory pihak ketiga · pemerintah AS
• https://www3.gehealthcare.com/~/media/downloads/us/support/site-planning/site-readiness/gehc-gateway_project_i... product