Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: GE HealthCare Component: Carescape Central Station Mai700 Firmware Clear all filters
TI-2020-05614 CVE-2020-6966 · GHSA-5w6g-rp5j-mg2g

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 &…

Priority MEDIUM 47

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, the affected products ut…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02221 Published 2020-01-24 No fix listed CWE-326
TI-2020-05613 CVE-2020-6965 · GHSA-36xm-w97x-vmwh

Unrestricted file upload in GE CARESCAPE Telemetry Server,ApexPro Telemetry…

Priority MEDIUM 45

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, B450 Version 2.X, B650 V…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0113 Published 2020-01-24 No fix listed CWE-434
TI-2020-05612 CVE-2020-6964 · GHSA-q967-h7g6-h4j3

Missing authentication in GE CARESCAPE Telemetry Server,ApexPro Telemetry…

Priority MEDIUM 40

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X and CARESCAPE Central Sta…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0136 Published 2020-01-24 No fix listed CWE-306
TI-2020-05611 CVE-2020-6963 · GHSA-xrpc-f6j4-wmx4

Hard-coded credentials in GE CARESCAPE Telemetry Server,ApexPro Telemetry…

Priority MEDIUM 48

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, the affected products ut…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02746 Published 2020-01-24 No fix listed CWE-798
TI-2020-05610 CVE-2020-6962 · GHSA-jv9q-g859-9p32

Improper input validation in GE CARESCAPE Telemetry Server,ApexPro Telemetry…

Priority MEDIUM 51

In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Telemetry Server Version 4.3, CARESCAPE Central Station (CSC…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.04932 Published 2020-01-24 No fix listed CWE-20
TI-2020-05609 CVE-2020-6961 · GHSA-h5jv-7mvc-m9hg

Insufficiently protected credentials in GE CARESCAPE Telemetry Server,ApexPro Telemetry…

Priority MEDIUM 46

In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Telemetry Server Version 4.3, CARESCAPE Central Station (CSC…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01619 Published 2020-01-24 No fix listed CWE-256