critical10.0
CVE-2020-6961
In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE…
Impact
In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Telemetry Server Version 4.3, CARESCAPE Central Station (CSCS) Versions 1.X, a vulnerability exists in the affected products that could allow an attacker to obtain access to the SSH private key in configuration files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gehealthcare | Apexpro Telemetry Server Firmware | through 4.2 |
| Gehealthcare | Carescape Central Station Mai700 Firmware | Version 1.0 |
| Gehealthcare | Carescape Central Station Mas700 Firmware | Version 1.0 |
| Gehealthcare | Clinical Information Center Mp100d Firmware | Versions 4.0, 5.0 |
| Gehealthcare | Clinical Information Center Mp100r Firmware | Versions 4.0, 5.0 |
| Gehealthcare | Carescape Telemetry Server Mp100r Firmware | through 4.2 Version 4.3 |