CVE:CVE-2020-6964
CNNVD:CNNVD-202001-1098
多款GE产品中的键盘切换服务存在访问控制错误漏洞。远程攻击者可利用该漏洞控制键盘输入设备。以下产品及版本受到影响：ApexPro Telemetry Server 4.2及之前版本；CARESCAPE Telemetry Server v4.2及之前版本；Clinical Information Center (CIC) 4.X版本，5.X版本；CARESCAPE Telemetry Server 4.3版本；CARESCAPE Central Station (CSCS) 1.X版本；CARESCAPE Central Station (CSCS) 2.X版本。
solution:Upgrade gehealthcare apexpro_telemetry_server_firmware to a higher version than 4.2,and avoid the version (,4.2]; Upgrade gehealthcare carescape_central_station_mai700_firmware to a higher version than 1.0,2.0,and avoid the version 1.0,2.0; Upgrade gehealthcare carescape_central_station_mas700_firmware to a higher version than 1.0,2.0,and avoid the version 1.0,2.0; Upgrade gehealthcare clinical_information_center_mp100d_firmware to a higher version than 4.0,5.0,and avoid the version 4.0,5.0; Upgrade gehealthcare clinical_information_center_mp100r_firmware to a higher version than 4.0,5.0,and avoid the version 4.0,5.0; Upgrade gehealthcare carescape_telemetry_server_mp100r_firmware to a higher version than 4.2,and avoid the version (,4.2]