ICSMA-20-023-01

icsaUScisa_csaf_ot

GE CARESCAPE, ApexPro, and Clinical Information Center systems

Advisory ansehen veröffentlicht 2020-01-23

Successful exploitation of these vulnerabilities could occur when an attacker gains access to the mission critical (MC) and/or information exchange (IX) networks due to improper configuration or physical access to devices. An exploit could result in a loss of monitoring and/or loss of alarms during active patient monitoring. These vulnerabilities, if exploited, may allow an attacker to obtain PHI data, make changes at the operating system level of the device, with effects such as rendering the device unusable, otherwise interfering with the function of the device and/or making certain changes to alarm settings on connected patient monitors, and/or utilizing services used for remote viewing and control of devices on the network to access the clinical user interface and make changes to device settings and alarm limits, which could result in missed or unnecessary alarms or silencing of some alarms.

01

beschreibt (6)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2020-6966UScritical10.0—
In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS…
CVE-2020-6965UScritical9.9—
In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS…
CVE-2020-6964UShigh8.6OT erhöht—
In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS…
CVE-2020-6963UScritical10.0OT erhöht—
In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS…
CVE-2020-6962UScritical10.0—
In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Telemetry Server Ver…
CVE-2020-6961UScritical10.0—
In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Telemetry Server Ver…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (42)

  • BehobenApexPro Telemetry Server

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenApexPro Telemetry Server

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenApexPro Telemetry Server

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenApexPro Telemetry Server

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenApexPro Telemetry Server

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenApexPro Telemetry Server

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenB450

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenB450

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenB450

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenB450

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenB450

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenB450

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenB650

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenB650

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenB650

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenB650

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenB650

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenB650

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenB850

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenB850

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenB850

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenB850

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenB850

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenB850

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenCARESCAPE Central Station (CSCS)

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenCARESCAPE Central Station (CSCS)

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenCARESCAPE Central Station (CSCS)

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenCARESCAPE Central Station (CSCS)

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenCARESCAPE Central Station (CSCS)

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenCARESCAPE Central Station (CSCS)

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenCARESCAPE Telemetry Server

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenCARESCAPE Telemetry Server

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenCARESCAPE Telemetry Server

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenCARESCAPE Telemetry Server

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenCARESCAPE Telemetry Server

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenCARESCAPE Telemetry Server

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenClinical Information Center (CIC)

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenClinical Information Center (CIC)

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenClinical Information Center (CIC)

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenClinical Information Center (CIC)

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenClinical Information Center (CIC)

    GE recommends that, in addition to applying network management best practices, users ensure:

  • BehobenClinical Information Center (CIC)

    GE recommends that, in addition to applying network management best practices, users ensure:

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan