In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Telemetry Server Version 4.3, CARESCAPE Central Station (CSCS) Versions 1.X, a vulnerability exists in the affected products that could allow an attacker to obtain access to the SSH private key in configuration files.
Storing a password in plaintext may result in a system compromise.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Apexpro_telemetry_server_firmware | Gehealthcare | * | 4.2 (including) |