CVE-2020-6963

Name of the Vulnerable Software and Affected Versions ApexPro Telemetry Server versions 4.2 and prior CARESCAPE Telemetry Server versions 4.2 and prior Clinical Information Center (CIC) versions 4.X and 5.X CARESCAPE Central Station (CSCS) versions 1.X

Description The affected products use hard-coded SMB credentials, which could allow an attacker to remotely execute arbitrary code.

Recommendations For ApexPro Telemetry Server versions 4.2 and prior, update to a version that does not use hard-coded SMB credentials. For CARESCAPE Telemetry Server versions 4.2 and prior, update to a version that does not use hard-coded SMB credentials. For Clinical Information Center (CIC) versions 4.X and 5.X, update to a version that does not use hard-coded SMB credentials. For CARESCAPE Central Station (CSCS) versions 1.X, update to a version that does not use hard-coded SMB credentials.