CVE-2020-5608

Name of the Vulnerable Software and Affected Versions: CAMS for HIS CENTUM CS 3000 versions R3.08.10 through R3.09.50 CENTUM VP versions R4.01.00 through R6.07.00 B/M9000CS versions R5.04.01 through R5.05.01 B/M9000 VP versions R6.01.01 through R8.03.01

Description: The issue allows a remote unauthenticated attacker to bypass authentication and send altered communication packets. This is related to a lack of authentication when interacting via a specialized protocol, which can enable an unauthorized remote attacker to interact with the server.

Recommendations: For CAMS for HIS CENTUM CS 3000 versions R3.08.10 through R3.09.50, update to a version outside of this range to mitigate the risk. For CENTUM VP versions R4.01.00 through R6.07.00, update to a version outside of this range to mitigate the risk. For B/M9000CS versions R5.04.01 through R5.05.01, update to a version outside of this range to mitigate the risk. For B/M9000 VP versions R6.01.01 through R8.03.01, update to a version outside of this range to mitigate the risk. As a temporary workaround, consider restricting access to the specialized protocol to minimize the risk of exploitation.