ICSMA-20-023-01

icsaUScisa_csaf_ot

GE CARESCAPE, ApexPro, and Clinical Information Center systems

view advisory published 2020-01-23

Successful exploitation of these vulnerabilities could occur when an attacker gains access to the mission critical (MC) and/or information exchange (IX) networks due to improper configuration or physical access to devices. An exploit could result in a loss of monitoring and/or loss of alarms during active patient monitoring. These vulnerabilities, if exploited, may allow an attacker to obtain PHI data, make changes at the operating system level of the device, with effects such as rendering the device unusable, otherwise interfering with the function of the device and/or making certain changes to alarm settings on connected patient monitors, and/or utilizing services used for remote viewing and control of devices on the network to access the clinical user interface and make changes to device settings and alarm limits, which could result in missed or unnecessary alarms or silencing of some alarms.

01

describes (6)

Related CVEs.

IDseverity exploitable
CVE-2020-6966UScritical10.0—
In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS…
CVE-2020-6965UScritical9.9—
In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS…
CVE-2020-6964UShigh8.6OT elevated—
In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS…
CVE-2020-6963UScritical10.0OT elevated—
In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS…
CVE-2020-6962UScritical10.0—
In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Telemetry Server Ver…
CVE-2020-6961UScritical10.0—
In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Telemetry Server Ver…
02

references

External citations — patches, advisories, analysis.

03

remediations (42)

  • FixedApexPro Telemetry Server

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedApexPro Telemetry Server

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedApexPro Telemetry Server

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedApexPro Telemetry Server

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedApexPro Telemetry Server

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedApexPro Telemetry Server

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedB450

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedB450

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedB450

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedB450

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedB450

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedB450

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedB650

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedB650

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedB650

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedB650

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedB650

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedB650

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedB850

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedB850

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedB850

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedB850

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedB850

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedB850

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedCARESCAPE Central Station (CSCS)

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedCARESCAPE Central Station (CSCS)

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedCARESCAPE Central Station (CSCS)

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedCARESCAPE Central Station (CSCS)

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedCARESCAPE Central Station (CSCS)

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedCARESCAPE Central Station (CSCS)

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedCARESCAPE Telemetry Server

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedCARESCAPE Telemetry Server

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedCARESCAPE Telemetry Server

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedCARESCAPE Telemetry Server

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedCARESCAPE Telemetry Server

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedCARESCAPE Telemetry Server

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedClinical Information Center (CIC)

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedClinical Information Center (CIC)

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedClinical Information Center (CIC)

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedClinical Information Center (CIC)

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedClinical Information Center (CIC)

    GE recommends that, in addition to applying network management best practices, users ensure:

  • FixedClinical Information Center (CIC)

    GE recommends that, in addition to applying network management best practices, users ensure:

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan