CVE-2020-6963

🗓️ 24 Jan 2020 17:15:13Reported by [email protected]Type

ApexPro Telemetry Server, CARESCAPE Telemetry Server, Clinical Information Center, CARESCAPE Central Station hard coded SMB credentials vulnerability, allowing remote code executio

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2020-6963	14 Nov 202406:09	–	circl
CVE	CVE-2020-6963	24 Jan 202016:31	–	cve
Cvelist	CVE-2020-6963	24 Jan 202016:31	–	cvelist
EUVD	EUVD-2020-28103	7 Oct 202500:30	–	euvd
ICS	GE CARESCAPE, ApexPro, and Clinical Information Center systems	23 Jan 202000:00	–	ics
Prion	Hardcoded credentials	24 Jan 202017:15	–	prion
RedhatCVE	CVE-2020-6963	22 May 202516:46	–	redhatcve
ThreatPost	Critical, Unpatched 'MDhex' Bugs Threaten Hospital Devices	23 Jan 202020:02	–	threatpost

NVD

Node

gehealthcare apexpro_telemetry_server_firmwareRange≤4.2

AND

gehealthcare apexpro_telemetry_serverMatch-

Node

gehealthcare carescape_central_station_mai700_firmwareMatch1.0

AND

gehealthcare carescape_central_station_mai700Match-

Node

gehealthcare carescape_central_station_mas700_firmwareMatch1.0

AND

gehealthcare carescape_central_station_mas700Match-

Node

gehealthcare clinical_information_center_mp100d_firmwareMatch4.0

gehealthcare clinical_information_center_mp100d_firmwareMatch5.0

AND

gehealthcare clinical_information_center_mp100dMatch-

Node

gehealthcare clinical_information_center_mp100r_firmwareMatch4.0

gehealthcare clinical_information_center_mp100r_firmwareMatch5.0

AND

gehealthcare clinical_information_center_mp100rMatch-

Node

gehealthcare carescape_telemetry_server_mp100r_firmwareRange≤4.2

AND

gehealthcare carescape_telemetry_server_mp100rMatch-

Source	Link
us-cert	www.us-cert.gov/ics/advisories/icsma-20-023-01
www3	www.www3.gehealthcare.com/~/media/downloads/us/support/site-planning/site-readiness/gehc-gateway_project_implementation_guide_pdf.pdf