PT-2020-3923
CVE-2020-5608
·
تاريخ النشر
2020-07-31
·
تاريخ التحديث
2020-08-12
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
CAMS for HIS CENTUM CS 3000 versions R3.08.10 through R3.09.50
CENTUM VP versions R4.01.00 through R6.07.00
B/M9000CS versions R5.04.01 through R5.05.01
B/M9000 VP versions R6.01.01 through R8.03.01
Description:
The issue allows a remote unauthenticated attacker to bypass authentication and send altered communication packets. This is related to a lack of authentication when interacting via a specialized protocol, which can enable an unauthorized remote attacker to interact with the server.
Recommendations:
For CAMS for HIS CENTUM CS 3000 versions R3.08.10 through R3.09.50, update to a version outside of this range to mitigate the risk.
For CENTUM VP versions R4.01.00 through R6.07.00, update to a version outside of this range to mitigate the risk.
For B/M9000CS versions R5.04.01 through R5.05.01, update to a version outside of this range to mitigate the risk.
For B/M9000 VP versions R6.01.01 through R8.03.01, update to a version outside of this range to mitigate the risk.
As a temporary workaround, consider restricting access to the specialized protocol to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾