{"id":"CVE-2020-6965","aliases":["EUVD-2020-28105","GHSA-36xm-w97x-vmwh"],"status":"published","title":"In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 \u0026 prior,...","description":"In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 \u0026 prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, B450 Version 2.X, B650 Version 1.X, B650 Version 2.X, B850 Version 1.X, B850 Version 2.X, a vulnerability in the software update mechanism allows an authenticated attacker to upload arbitrary files on the system through a crafted update package.","severity":{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0113,"percentile":0.66619,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20","CWE-434"],"published":"2020-01-24T17:06:53Z","modified":"2026-06-17T03:24:01Z","products":[{"vendor":"gehealthcare","product":"apexpro_telemetry_server_firmware"},{"vendor":"gehealthcare","product":"carescape_b450_monitor_firmware"},{"vendor":"gehealthcare","product":"carescape_b650_monitor_firmware"},{"vendor":"gehealthcare","product":"carescape_b850_monitor_firmware"},{"vendor":"gehealthcare","product":"carescape_central_station_mai700_firmware"},{"vendor":"gehealthcare","product":"carescape_central_station_mas700_firmware"},{"vendor":"gehealthcare","product":"carescape_telemetry_server_mp100r_firmware"},{"vendor":"gehealthcare","product":"clinical_information_center_mp100d_firmware"},{"vendor":"gehealthcare","product":"clinical_information_center_mp100r_firmware"}],"references":[{"url":"https://www.us-cert.gov/ics/advisories/icsma-20-023-01","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-6965"},{"url":"https://www3.gehealthcare.com/~/media/downloads/us/support/site-planning/site-readiness/gehc-gateway_project_implementation_guide_pdf.pdf","tags":["Product"]},{"url":"https://github.com/advisories/GHSA-36xm-w97x-vmwh"}],"sources":{"cve":[{"id":"CVE-2020-6965","description":"In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 \u0026 prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, B450 Version 2.X, B650 Version 1.X, B650 Version 2.X, B850 Version 1.X, B850 Version 2.X, a vulnerability in the software update mechanism allows an authenticated attacker to upload arbitrary files on the system through a crafted update package.","status":"published","published":"2020-01-24T17:06:53Z","modified":"2024-08-04T09:18:02.543Z","cwes":["CWE-434"],"updated_at":"2026-11-02T14:35:52.925152Z"}],"euvd":[{"id":"EUVD-2020-28105","description":"In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 \u0026 prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, B450 Version 2.X, B650 Version 1.X, B650 Version 2.X, B850 Version 1.X, B850 Version 2.X, a vulnerability in the software update mechanism allows an authenticated attacker to upload arbitrary files on the system through a crafted update package.","status":"published","published":"2020-01-24T17:06:53Z","modified":"2024-08-04T09:18:02Z","updated_at":"2026-11-03T03:08:01.029528Z"}],"ghsa":[{"id":"GHSA-36xm-w97x-vmwh","title":"In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 \u0026 prior,...","description":"In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 \u0026 prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, B450 Version 2.X, B650 Version 1.X, B650 Version 2.X, B850 Version 1.X, B850 Version 2.X, a vulnerability in the software update mechanism allows an authenticated attacker to upload arbitrary files on the system through a crafted update package.","status":"published","published":"2022-05-24T17:07:19Z","modified":"2023-01-29T05:01:12Z","updated_at":"2026-11-02T14:44:45.404949Z"}],"nvd":[{"id":"CVE-2020-6965","description":"In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 \u0026 prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, B450 Version 2.X, B650 Version 1.X, B650 Version 2.X, B850 Version 1.X, B850 Version 2.X, a vulnerability in the software update mechanism allows an authenticated attacker to upload arbitrary files on the system through a crafted update package.","status":"published","published":"2020-01-24T18:15:12.647Z","modified":"2026-06-17T03:24:01.8Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-434","CWE-20"],"updated_at":"2026-11-02T14:05:52.385274Z"}]}}