CVE:CVE-2020-6962
CNNVD:CNNVD-202001-1097
多款GE产品中基于Web的系统配置实用程序存在输入验证错误漏洞。远程攻击者可利用漏洞执行任意代码。以下产品及版本受到影响：GE ApexPro Telemetry Server 4.2及之前版本；CARESCAPE Telemetry Server v4.2及之前版本；Clinical Information Center (CIC)4.X版本，5.X版本； CARESCAPE Telemetry Server 4.3版本；CARESCAPE Central Station (CSCS) 1.X版本；CARESCAPE Central Station (CSCS) 2.X版本；B450 2.X版本；B650 1.X版本，2.X版本；B850 1.X版本，2.X版本。
solution:Upgrade gehealthcare apexpro_telemetry_server_firmware to a higher version than 4.2,4.3,and avoid the version (,4.2],4.3; Upgrade gehealthcare carescape_b450_monitor_firmware to a higher version than 2.0,and avoid the version 2.0; Upgrade gehealthcare carescape_b650_monitor_firmware to a higher version than 1.0,2.0,and avoid the version 1.0,2.0; Upgrade gehealthcare carescape_b850_monitor_firmware to a higher version than 1.0,2.0,and avoid the version 1.0,2.0; Upgrade gehealthcare carescape_central_station_mai700_firmware to a higher version than 1.0,2.0,and avoid the version 1.0,2.0; Upgrade gehealthcare carescape_central_station_mas700_firmware to a higher version than 1.0,2.0,and avoid the version 1.0,2.0; Upgrade gehealthcare clinical_information_center_mp100d_firmware to a higher version than 4.0,5.0,and avoid the version 4.0,5.0; Upgrade gehealthcare clinical_information_center_mp100r_firmware to a higher version than 4.0,5.0,and avoid the version 4.0,5.0; Upgrade gehealthcare carescape_telemetry_server_mp100r_firmware to a higher version than 4.2,4.3,and avoid the version (,4.2],4.3