Read the docs

GE HealthCare

Records47All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical38CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

GE HealthCare records in CISA KEV

No GE HealthCare vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Apexpro Telemetry Server Firmware 6 records MEDIUM Carescape Central Station Mai700 Firmware 6 records MEDIUM Carescape Central Station Mas700 Firmware 6 records MEDIUM Carescape Telemetry Server Mp100r Firmware 6 records MEDIUM Clinical Information Center Mp100d Firmware 6 records MEDIUM Clinical Information Center Mp100r Firmware 6 records MEDIUM Optima Mr360 Firmware 4 records MEDIUM Centricity Pacs Workstation 3 records MEDIUM

Records

6 records in Carescape Central Station Mas700 Firmware · all components

TI-2020-05610 CVE-2020-6962 · GHSA-jv9q-g859-9p32

Improper input validation in GE CARESCAPE Telemetry Server,ApexPro Telemetry…

Priority MEDIUM 51

In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Telemetry Server Version 4.3, CARESCAPE Central Station (CSC…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.04932 Published 2020-01-24 No fix listed CWE-20
TI-2020-05611 CVE-2020-6963 · GHSA-xrpc-f6j4-wmx4

Hard-coded credentials in GE CARESCAPE Telemetry Server,ApexPro Telemetry…

Priority MEDIUM 48

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, the affected products ut…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02746 Published 2020-01-24 No fix listed CWE-798
TI-2020-05614 CVE-2020-6966 · GHSA-5w6g-rp5j-mg2g

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 &…

Priority MEDIUM 47

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, the affected products ut…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02221 Published 2020-01-24 No fix listed CWE-326
TI-2020-05609 CVE-2020-6961 · GHSA-h5jv-7mvc-m9hg

Insufficiently protected credentials in GE CARESCAPE Telemetry Server,ApexPro Telemetry…

Priority MEDIUM 46

In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Telemetry Server Version 4.3, CARESCAPE Central Station (CSC…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01619 Published 2020-01-24 No fix listed CWE-256
TI-2020-05613 CVE-2020-6965 · GHSA-36xm-w97x-vmwh

Unrestricted file upload in GE CARESCAPE Telemetry Server,ApexPro Telemetry…

Priority MEDIUM 45

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, B450 Version 2.X, B650 V…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0113 Published 2020-01-24 No fix listed CWE-434
TI-2020-05612 CVE-2020-6964 · GHSA-q967-h7g6-h4j3

Missing authentication in GE CARESCAPE Telemetry Server,ApexPro Telemetry…

Priority MEDIUM 40

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X and CARESCAPE Central Sta…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0136 Published 2020-01-24 No fix listed CWE-306
Open these records in search →