CVE:CVE-2020-6966
CNNVD:CNNVD-202001-1102
多款GE产品中存在加密问题漏洞，该漏洞源于远程桌面控制使用了弱加密方式。远程攻击者可利用该漏洞执行任意代码。以下产品及版本受到影响：ApexPro Telemetry Server 4.2及之前版本；CARESCAPE Telemetry Server v4.2及之前版本；Clinical Information Center (CIC) 4.X版本，5.X版本； CARESCAPE Telemetry Server 4.3版本；CARESCAPE Central Station (CSCS) 1.X版本。
solution:Upgrade gehealthcare apexpro_telemetry_server_firmware to a higher version than 4.2,and avoid the version (,4.2]; Upgrade gehealthcare carescape_central_station_mai700_firmware to a higher version than 1.0,and avoid the version 1.0; Upgrade gehealthcare carescape_central_station_mas700_firmware to a higher version than 1.0,and avoid the version 1.0; Upgrade gehealthcare clinical_information_center_mp100d_firmware to a higher version than 4.0,5.0,and avoid the version 4.0,5.0; Upgrade gehealthcare clinical_information_center_mp100r_firmware to a higher version than 4.0,5.0,and avoid the version 4.0,5.0; Upgrade gehealthcare carescape_telemetry_server_mp100r_firmware to a higher version than 4.2,and avoid the version (,4.2]