CVE-2020-6961: Critical severity Gehealthcare Apexpro Telemetry Server Firmware vulnerability
In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Telemetry Server Version 4.3, CARESCAPE Central Station (CSCS) Versions 1.X, a vulnerability exists in the affected products that could allow an attacker to obtain access to the SSH private key in configuration files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-6961?
The severity of CVE-2020-6961 is critical (10 out of 10).
What products are affected by CVE-2020-6961?
ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Telemetry Server Version 4.3, CARESCAPE Central Station (CSCS) Versions 1.X.
How can I fix CVE-2020-6961?
Update to a version higher than 4.2 for ApexPro Telemetry Server, CARESCAPE Telemetry Server, and Clinical Information Center, and update to a version higher than 1.0 for CARESCAPE Central Station.
Where can I find more information about CVE-2020-6961?
You can find more information about CVE-2020-6961 at the following references: [US-CERT Advisory](https://www.us-cert.gov/ics/advisories/icsma-20-023-01), [GE Healthcare Gateway Project Implementation Guide](https://www3.gehealthcare.com/~/media/downloads/us/support/site-planning/site-readiness/gehc-gateway_project_implementation_guide_pdf.pdf).
What are the Common Weakness Enumerations (CWE) associated with CVE-2020-6961?
The Common Weakness Enumerations (CWE) associated with CVE-2020-6961 are CWE-522 and CWE-256.