VULNERABILITY INTELLIGENCE

CVE-2020-6964

CVSS score8.6 HIGH

EPSS probability1.36%

CISA KEVNot currently listed

Published2020-01-24

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Description

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X and CARESCAPE Central Station (CSCS) Versions 2.X, the integrated service for keyboard switching of the affected devices could allow attackers to obtain remote keyboard input access without authentication over the network.

Weakness classification

CWE-306: Missing Authentication for Critical Function

Primary references

ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource
nvd@nist.gov — Product
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource