CVE-2020-6962: Input Validation
In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Telemetry Server Version 4.3, CARESCAPE Central Station (CSCS) Versions 1.X CARESCAPE Central Station (CSCS) Versions 2.X, B450 Version 2.X, B650 Version 1.X, B650 Version 2.X, B850 Version 1.X, B850 Version 2.X, an input validation vulnerability exists in the web-based system configuration utility that could allow an attacker to obtain arbitrary remote code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-6962?
The severity of CVE-2020-6962 is critical with a severity value of 10.
What software versions are affected by CVE-2020-6962?
ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Telemetry Server Version 4.3, CARESCAPE Central Station (CSCS) Versions 1.X, CARESCAPE Central Station (CSCS) Versions 2.X, B450 Version 2.X.
How can I fix CVE-2020-6962?
To fix CVE-2020-6962, update to a version that is not vulnerable.
Where can I find more information about CVE-2020-6962?
You can find more information about CVE-2020-6962 at the following links: [US-CERT Advisory](https://www.us-cert.gov/ics/advisories/icsma-20-023-01), [GE Healthcare Gateway Project Implementation Guide](https://www3.gehealthcare.com/~/media/downloads/us/support/site-planning/site-readiness/gehc-gateway_project_implementation_guide_pdf.pdf)