CVE-2020-6961

In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Telemetry Server Version 4.3, CARESCAPE Central Station CSCS Versions 1.X, a vulnerability exists in the affected products that could allow...

CVE-2020-6961

CVE-2020-6961 affects GE Healthcare CARESCAPE Telemetry Server, ApexPro Telemetry Server, CIC (4.X/5.X), and CSCS (1.X) per GE ICS advisory (ICSMA-20-023-01). Root cause: unprotected storage of credentials that could allow an attacker to obtain the SSH private key from configuration files. Impact...

PT-2020-19314

Name of the Vulnerable Software and Affected Versions ApexPro Telemetry Server versions 4.2 and prior CARESCAPE Telemetry Server versions 4.2 and prior Clinical Information Center CIC versions 4.X and 5.X CARESCAPE Central Station CSCS versions 1.X Description The affected products use a weak...

PT-2020-19313

Name of the Vulnerable Software and Affected Versions ApexPro Telemetry Server versions 4.2 and prior CARESCAPE Telemetry Server version 4.2 and prior Clinical Information Center CIC versions 4.X and 5.X CARESCAPE Central Station CSCS versions 1.X B450 version 2.X B650 versions 1.X and 2.X B850...

PT-2020-19310

Name of the Vulnerable Software and Affected Versions ApexPro Telemetry Server versions 4.2 and prior CARESCAPE Telemetry Server versions 4.2 and prior, version 4.3 Clinical Information Center CIC versions 4.X and 5.X CARESCAPE Central Station CSCS versions 1.X and 2.X B450 versions 2.X B650...

PT-2020-19312

Name of the Vulnerable Software and Affected Versions ApexPro Telemetry Server versions 4.2 and prior CARESCAPE Telemetry Server version 4.2 and prior Clinical Information Center CIC versions 4.X and 5.X CARESCAPE Central Station CSCS versions 1.X and 2.X Description The integrated service for...

PT-2020-19309

Name of the Vulnerable Software and Affected Versions ApexPro Telemetry Server versions 4.2 and prior CARESCAPE Telemetry Server versions 4.3 and prior Clinical Information Center CIC versions 4.X and 5.X CARESCAPE Central Station CSCS versions 1.X Description A vulnerability exists in the affect...

CVE-2020-6965: Unrestricted Upload of File with Dangerous Type

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X, B450 Version 2.X, B650 Version 1.X, B650 Version 2.X, B850 Version 1.X, B850 Version 2.X, a vulnerability...

CVE-2020-6962: Improper Input Validation

In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Telemetry Server Version 4.3, CARESCAPE Central Station CSCS Versions 1.X CARESCAPE Central Station CSCS Versions 2.X, B450 Version 2.X, B6...

CVE-2020-6961: Plaintext Storage of a Password

In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Telemetry Server Version 4.3, CARESCAPE Central Station CSCS Versions 1.X, a vulnerability exists in the affected products that could allow...

CVE-2020-6966: Inadequate Encryption Strength

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X, the affected products utilize a weak encryption scheme for remote desktop control, which may allow an...

CVE-2020-6964: Missing Authentication for Critical Function

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X and CARESCAPE Central Station CSCS Versions 2.X, the integrated service for keyboard switching of the...

CVE-2020-6963: Use of Hard-coded Credentials

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X, the affected products utilized hard coded SMB credentials, which may allow an attacker to remotely execut...

PT-2020-19311

Name of the Vulnerable Software and Affected Versions ApexPro Telemetry Server versions 4.2 and prior CARESCAPE Telemetry Server versions 4.2 and prior Clinical Information Center CIC versions 4.X and 5.X CARESCAPE Central Station CSCS versions 1.X Description The affected products use hard-coded...

GE CARESCAPE, ApexPro, and Clinical Information Center systems

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: GE Equipment: CARESCAPE Telemetry Server, ApexPro Telemetry Server, CARESCAPE Central Station CSCS and Clinical Information Center CIC systems, CARESCAPE B450, B650, B850 Monitors Vulnerabilities:...

Iran Cyber Threat Update

ARCHIVED STORY Iran Cyber Threat Update By Trellix · January 08, 2020 Recent political tensions in the Middle East region have led to significant speculation of increased cyber-related activities. McAfee is on a heightened state of alert to monitor the evolving threats and rapidly implement...

The Curious Case of WebCrypto Diffie-Hellman on Firefox - Small Subgroups Key Recovery Attack on DH

tl;dr Mozilla Firefox prior to version 72 suffers from Small Subgroups Key Recovery Attack on DH in the WebCrypto 's API. The Firefox's team fixed the issue removing completely support for DH over finite fields that is not in the WebCrypto standard. If you find this interesting read further below...

SUSE-SU-2019:3394-1 Security update for python-azure-agent

This update for python-azure-agent fixes the following issues: Update to version 2.2.45 jscECO-80 + Add support for Gen2 VM resource disks + Use alternate systemd detection + Fix /proc/net/route requirement that causes errors on FreeBSD + Add cloud-init auto-detect to prevent multiple provisionin...

Jiangsu Jinzhi Technology Co., Ltd. iPACS-5772 suffers from denial-of-service vulnerability (CNVD-2020-01593)

iPACS-5772 is a measurement and control device with remote control, telemetry, telecommunication functions, logic blocking function, programmed operation function, device self-test, time-alignment function, and the device is equipped with software time-alignment and hardware time-alignment...

Mac threat detections on the rise in 2019

Conventional wisdom has been that, although not invulnerable to cyberthreats as some old Apple ads would have you believe, Macs are afflicted with considerably fewer infections than Windows PCs. However, when reviewing our 2019 Mac detection telemetry, we noticed a startling upward trend. Indeed,...