Hardcoded credentials

2015-08-0414:59:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.4%

JSON

The Ad Hoc Reporting feature in GE Healthcare Centricity DMS 4.2 has a password of Never!Mind for the Administrator user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value.

CPENameOperatorVersion
centricity_dmseq4.2

CPE	Name	Operator	Version
	centricity_dms	eq	4.2

References

apps.gehealthcare.com/servlet/ClientServlet/0908141_DMS+4.2+MTG.pdf?REQ=RAA&DIRECTION=0908141&FILENAME=0908141_DMS%2B4.2%2BMTG.pdf&FILEREV=D&DOCREV_ORG=D

www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/

twitter.com/digitalbond/status/619250429751222277