Back
CVE-2020-6965
CRITICAL
In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, B450 Version 2.X, B650 Version 1.X, B650 Version 2.X, B850 Version 1.X, B850 Version 2.X, a vulnerability in the software update mechanism allows an authenticated attacker to upload arbitrary files on the system through a crafted update package.
Published: Jan 24, 2020
Modified: Jun 17, 2026
CWE-434
CWE-20
CWE-434
CVSS Metrics
CVSSv3
Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE
Scope:
CHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected Products (13)
| Vendor | Product | Version |
|---|---|---|
| gehealthcare | apexpro_telemetry_server_firmware | * |
| gehealthcare | carescape_b450_monitor_firmware | 2.0 |
| gehealthcare | carescape_b650_monitor_firmware | 1.0 |
| gehealthcare | carescape_b650_monitor_firmware | 2.0 |
| gehealthcare | carescape_b850_monitor_firmware | 1.0 |
| gehealthcare | carescape_b850_monitor_firmware | 2.0 |
| gehealthcare | carescape_central_station_mai700_firmware | 1.0 |
| gehealthcare | carescape_central_station_mas700_firmware | 1.0 |
| gehealthcare | clinical_information_center_mp100d_firmware | 4.0 |
| gehealthcare | clinical_information_center_mp100d_firmware | 5.0 |
| gehealthcare | clinical_information_center_mp100r_firmware | 4.0 |
| gehealthcare | clinical_information_center_mp100r_firmware | 5.0 |
| gehealthcare | carescape_telemetry_server_mp100r_firmware | * |
GitHub Security Advisory GHSA-36xm-w97x-vmwh
In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior,...
References (3)
- https://www.us-cert.gov/ics/advisories/icsma-20-023-01 Third Party Advisory, US Government Resource
- https://www3.gehealthcare.com/~/media/downloads/us/support/site-planning/site-readiness/gehc-gateway_project_implementation_guide_pdf.pdf Product
- https://www.us-cert.gov/ics/advisories/icsma-20-023-01 Third Party Advisory, US Government Resource
Risk Scores
CVSS Score
9.9 / 10
EPSS Score
1.13%
Top 36% most likely to be exploited
Threat Score
39.9 / 100
Data Sources
NVD
EPSS
GitHub