Vulnerabilities > Gehealthcare

DATE CVE VULNERABILITY TITLE RISK
2015-08-04 CVE-2011-5322 Credentials Management vulnerability in Gehealthcare Centricity Analytics Server 1.1
GE Healthcare Centricity Analytics Server 1.1 has a default password of (1) V0yag3r for the SQL Server sa user, (2) G3car3s for the analyst user, (3) G3car3s for the ccg user, (4) V0yag3r for the viewer user, and (5) geservice for the geservice user in the Webmin interface, which has unspecified impact and attack vectors.
network
low complexity
gehealthcare CWE-255
critical
10.0
2015-08-04 CVE-2010-5310 Credentials Management vulnerability in Gehealthcare Revolution Xq/I
The Acquisition Workstation for the GE Healthcare Revolution XQ/i has a password of adw3.1 for the sdc user, which has unspecified impact and attack vectors.
network
low complexity
gehealthcare CWE-255
critical
10.0
2015-08-04 CVE-2010-5309 Credentials Management vulnerability in Gehealthcare Cadstream Server Firmware
GE Healthcare CADStream Server has a default password of confirma for the admin user, which has unspecified impact and attack vectors.
network
low complexity
gehealthcare CWE-255
critical
10.0
2015-08-04 CVE-2010-5308 Credentials Management vulnerability in Gehealthcare Optima Mr360 Firmware
GE Healthcare Optima MR360 does not require authentication for the HIPAA emergency login procedure, which allows physically proximate users to gain access via an arbitrary username in the Emergency Login screen.
network
low complexity
gehealthcare CWE-255
critical
10.0
2015-08-04 CVE-2010-5307 Credentials Management vulnerability in Gehealthcare Optima Mr360 Firmware
The HIPAA configuration interface in GE Healthcare Optima MR360 has a password of (1) operator for the root account, (2) adw2.0 for the admin account, and (3) adw2.0 for the sdc account, which has unspecified impact and attack vectors.
network
low complexity
gehealthcare CWE-255
critical
10.0
2015-08-04 CVE-2010-5306 Credentials Management vulnerability in Gehealthcare products
GE Healthcare Optima CT680, CT540, CT640, and CT520 has a default password of #bigguy for the root user, which has unspecified impact and attack vectors.
network
low complexity
gehealthcare CWE-255
critical
10.0
2015-08-04 CVE-2009-5143 Credentials Management vulnerability in Gehealthcare Discovery 530C Firmware
GE Healthcare Discovery 530C has a password of #bigguy1 for the (1) acqservice user and (2) wsservice user of the Xeleris System, which has unspecified impact and attack vectors.
network
low complexity
gehealthcare CWE-255
critical
10.0
2015-08-04 CVE-2007-6757 Credentials Management vulnerability in Gehealthcare Centricity DMS Firmware 4.0/4.1/4.2
GE Healthcare Centricity DMS 4.2, 4.1, and 4.0 has a password of Muse!Admin for the Museadmin user, which has unspecified impact and attack vectors.
network
low complexity
gehealthcare CWE-255
critical
10.0
2015-08-04 CVE-2006-7253 Credentials Management vulnerability in Gehealthcare Infinia II
GE Healthcare Infinia II has a default password of (1) infinia for the infinia user, (2) #bigguy1 for the acqservice user, (3) dont4get2 for the Administrator user, (4) #bigguy1 for the emergency user, and (5) 2Bfamous for the InfiniaAdmin user, which has unspecified impact and attack vectors.
network
low complexity
gehealthcare CWE-255
critical
10.0
2015-08-04 CVE-2004-2777 Credentials Management vulnerability in Gehealthcare Centricity Image Vault Firmware
GE Healthcare Centricity Image Vault 3.x has a password of (1) gemnet for the administrator account, (2) webadmin for the webadmin administrator account of the ASACA DVD library, (3) an empty value for the gemsservice account of the Ultrasound Database, and possibly (4) gemnet2002 for the gemnet2002 account of the GEMNet license server, which has unspecified impact and attack vectors.
network
low complexity
gehealthcare CWE-255
critical
10.0