{"id":"CVE-2020-6964","aliases":["EUVD-2020-28104","GHSA-q967-h7g6-h4j3"],"status":"published","title":"In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 \u0026 prior,...","description":"In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 \u0026 prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X and CARESCAPE Central Station (CSCS) Versions 2.X, the integrated service for keyboard switching of the affected devices could allow attackers to obtain remote keyboard input access without authentication over the network.","severity":{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0136,"percentile":0.71921,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-306"],"published":"2020-01-24T16:32:13Z","modified":"2026-06-17T03:24:01Z","products":[{"vendor":"gehealthcare","product":"apexpro_telemetry_server_firmware"},{"vendor":"gehealthcare","product":"carescape_central_station_mai700_firmware"},{"vendor":"gehealthcare","product":"carescape_central_station_mas700_firmware"},{"vendor":"gehealthcare","product":"carescape_telemetry_server_mp100r_firmware"},{"vendor":"gehealthcare","product":"clinical_information_center_mp100d_firmware"},{"vendor":"gehealthcare","product":"clinical_information_center_mp100r_firmware"}],"references":[{"url":"https://www.us-cert.gov/ics/advisories/icsma-20-023-01","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-6964"},{"url":"https://www3.gehealthcare.com/~/media/downloads/us/support/site-planning/site-readiness/gehc-gateway_project_implementation_guide_pdf.pdf","tags":["Product"]},{"url":"https://github.com/advisories/GHSA-q967-h7g6-h4j3"}],"sources":{"cve":[{"id":"CVE-2020-6964","description":"In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 \u0026 prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X and CARESCAPE Central Station (CSCS) Versions 2.X, the integrated service for keyboard switching of the affected devices could allow attackers to obtain remote keyboard input access without authentication over the network.","status":"published","published":"2020-01-24T16:32:13Z","modified":"2024-08-04T09:18:02.496Z","cwes":["CWE-306"],"updated_at":"2026-11-02T14:35:52.592504Z"}],"euvd":[{"id":"EUVD-2020-28104","description":"In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 \u0026 prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X and CARESCAPE Central Station (CSCS) Versions 2.X, the integrated service for keyboard switching of the affected devices could allow attackers to obtain remote keyboard input access without authentication over the network.","status":"published","published":"2020-01-24T16:32:13Z","modified":"2024-08-04T09:18:02Z","updated_at":"2026-11-03T03:08:01.029528Z"}],"ghsa":[{"id":"GHSA-q967-h7g6-h4j3","title":"In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 \u0026 prior,...","description":"In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 \u0026 prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X and CARESCAPE Central Station (CSCS) Versions 2.X, the integrated service for keyboard switching of the affected devices could allow attackers to obtain remote keyboard input access without authentication over the network.","status":"published","published":"2022-05-24T17:07:19Z","modified":"2023-01-29T05:01:12Z","updated_at":"2026-11-02T14:44:45.404949Z"}],"nvd":[{"id":"CVE-2020-6964","description":"In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 \u0026 prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X and CARESCAPE Central Station (CSCS) Versions 2.X, the integrated service for keyboard switching of the affected devices could allow attackers to obtain remote keyboard input access without authentication over the network.","status":"published","published":"2020-01-24T17:15:13.297Z","modified":"2026-06-17T03:24:01.687Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:05:52.385274Z"}]}}