Lucene search

[email protected]CVE-2002-2445

HistoryAug 04, 2015 - 2:59 p.m.

CVE-2002-2445

2015-08-0414:59:01

[email protected]

web.nvd.nist.gov

ge healthcare

millennium mg

myosight

default password

vulnerability

cve-2002-2445

nvd

security

healthcare

password management

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.9%

JSON

GE Healthcare Millennium MG, NC, and MyoSIGHT has a default password of (1) root.genie for the root user, (2) “service.” for the service user, (3) admin.genie for the admin user, (4) reboot for the reboot user, and (5) shutdown for the shutdown user, which has unspecified impact and attack vectors.

Affected configurations

NVD

Node

gehealthcaremillennium_mg

gehealthcaremillennium_myosight

gehealthcaremillennium_nc

CPENameOperatorVersion
gehealthcare:millennium_mggehealthcare millennium mgeq*
gehealthcare:millennium_myosightgehealthcare millennium myosighteq*
gehealthcare:millennium_ncgehealthcare millennium nceq*

CPE	Name	Operator	Version
gehealthcare:millennium_mg	gehealthcare millennium mg	eq	*
gehealthcare:millennium_myosight	gehealthcare millennium myosight	eq	*
gehealthcare:millennium_nc	gehealthcare millennium nc	eq	*

References

apps.gehealthcare.com/servlet/ClientServlet/2338955-100.pdf?REQ=RAA&DIRECTION=2338955-100&FILENAME=2338955-100.pdf&FILEREV=1&DOCREV_ORG=1

apps.gehealthcare.com/servlet/ClientServlet/2354459-100.pdf?REQ=RAA&DIRECTION=2354459-100&FILENAME=2354459-100.pdf&FILEREV=4&DOCREV_ORG=4

www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/

twitter.com/digitalbond/status/619250429751222277

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.9%

JSON

Related for CVE-2002-2445

nvd1 cvelist1