Design/Logic Flaw

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX001, and 7.6.0 before 7.6.0.1 IFIX001; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX001 and 7.6.0 before 7.6.0.1 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli ...

GE Healthcare Centricity PACS Workstation Trust Management Vulnerability (CNVD-2015-05140)

GE Healthcare Centricity PACS Workstation is a General Electric GE image archiving and transfer system PACS workstation for the healthcare industry. A security vulnerability exists in GE Healthcare Centricity PACS Workstation versions 4.0 through 4.0.1, which originates from the use of 'ddpadmin'...

CVE-2013-7442

GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1 has a password of 1 CANal1 for the Administrator user and 2 iis for the IIS user, which has unspecified impact and attack vectors related to TimbuktuPro. NOTE: it is not clear whether this password is default, hardcoded, or dependent on...

CVE-2013-7405

The Ad Hoc Reporting feature in GE Healthcare Centricity DMS 4.2 has a password of Never!Mind for the Administrator user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a...

CVE-2013-7404

GE Healthcare Discovery NM 750b has a password of 2getin for the insite account for 1 Telnet and 2 FTP, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value...

CVE-2012-6695

GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1 has a password of ddpadmin for the ddpadmin user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value...

CVE-2012-6694

GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1, and Server 4.0, has a password of 2charGE for the geservice account, which has unspecified impact and attack vectors related to TimbuktuPro. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system o...

CVE-2011-5324

The TeraRecon server, as used in GE Healthcare Centricity PACS-IW 3.7.3.7, 3.7.3.8, and possibly other versions, has a password of 1 shared for the shared user and 2 scan for the scan user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default,...

CVE-2011-5323

GE Healthcare Centricity PACS-IW 3.7.3.7, 3.7.3.8, and possibly other versions has a password of A11enda1e for the sa SQL server user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that...

CVE-2010-5310

The Acquisition Workstation for the GE Healthcare Revolution XQ/i has a password of adw3.1 for the sdc user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value...

CVE-2009-5143

GE Healthcare Discovery 530C has a password of bigguy1 for the 1 acqservice user and 2 wsservice user of the Xeleris System, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires ...

CVE-2007-6757

GE Healthcare Centricity DMS 4.2, 4.1, and 4.0 has a password of Muse!Admin for the Museadmin user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value...

Hardcoded credentials

The Ad Hoc Reporting feature in GE Healthcare Centricity DMS 4.2 has a password of Never!Mind for the Administrator user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a...

CVE-2014-7232

GE Healthcare Discovery XR656 and XR656 Plus devices are affected by a vulnerability due to default or hard-coded credentials (insite user: 2getin; xruser: 4$xray; root: #superxr). The ICS-CERT advisory enumerates affected products and states that successful exploitation could bypass authenticati...

CVE-2013-7404

GE Healthcare Discovery NM 750b has a password of 2getin for the insite account for 1 Telnet and 2 FTP, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value...

CVE-2011-5323

GE Healthcare Centricity PACS-IW 3.7.3.7, 3.7.3.8, and possibly other versions has a password of A11enda1e for the sa SQL server user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that...

CVE-2013-7405

The Ad Hoc Reporting feature in GE Healthcare Centricity DMS 4.2 has a password of Never!Mind for the Administrator user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a...

CVE-2002-2446

The CVE-2002-2446 issue affects GE Healthcare Millennium MG / NC / MyoSIGHT (and related GE imaging systems) due to default or hard-coded credentials: the insite.genieacq password cannot be changed without disabling remote InSite support. This enables potential remote authentication bypass on aff...

CVE-2012-6695

GE Healthcare Centricity PACS Workstation 4.0/4.0.1 uses a ddpadmin password for the ddpadmin user. The connected ICS advisory characterizes this as default or hard-coded credentials (CWE-287) with potential remote authentication bypass. Exploitation could allow remote access to affected devices,...

CVE-2012-6695

GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1 has a password of ddpadmin for the ddpadmin user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value...