CVE-2010-5309
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.7%
GE Healthcare CADStream Server has a default password of confirma for the admin user, which has unspecified impact and attack vectors.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| gehealthcare:cadstream_server_firmware | gehealthcare cadstream server firmware | eq | - |
References
apps.gehealthcare.com/servlet/ClientServlet/MR360+operator+manual+paper.pdf?REQ=RAA&DIRECTION=5339461-1EN&FILENAME=MR360%2Boperator%2Bmanual%2Bpaper.pdf&FILEREV=4&DOCREV_ORG=4
www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/
ics-cert.us-cert.gov/advisories/ICSMA-18-037-02
twitter.com/digitalbond/status/619250429751222277
Related
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.7%