CVE-2013-7442

CVE-2013-7442 relates to GE Healthcare Centricity PACS Workstation and related Centricity PACS components using default or hard-coded credentials (e.g., CANal1 for Administrator and iis for IIS). The ICS-CERT advisory (GE Healthcare) lists affected products including Centricity PACS Server/ IW/ R...

CVE-2012-6693

CVE-2012-6693 concerns GE Healthcare Centricity PACS Server with default credentials: nasro / nasro (ReadOnly) and nasrw (Read/Write). The connected documents confirm a default credential issue across Centricity PACS components, enabling remote access with these accounts. The primary root cause i...

CVE-2011-5324

CVE-2011-5324 affects GE Healthcare Centricity PACS-IW via the TeraRecon server. CNVD/NVD records indicate built-in accounts in PACS-IW with a shared password for the shared user and a password for the scan user (versions 3.7.3.7/3.7.3.8 mentioned). This design enables remote attackers to use the...

CVE-2007-6757

GE Healthcare Centricity DMS 4.2, 4.1, and 4.0 has a password of Muse!Admin for the Museadmin user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value...

CVE-2014-9736

GE Healthcare Centricity Clinical Archive Audit Trail Repository is affected by a default-password issue: initinit for the SSL key manager and server keystore, keystore_password for the server truststore, and atna for the primary and archive storage databases. This credential exposure can enable ...

CVE-2011-5322

GE Healthcare Centricity Analytics Server 1.1 has a default password of 1 V0yag3r for the SQL Server sa user, 2 G3car3s for the analyst user, 3 G3car3s for the ccg user, 4 V0yag3r for the viewer user, and 5 geservice for the geservice user in the Webmin interface, which has unspecified impact and...

PT-2015-3577

Name of the Vulnerable Software and Affected Versions GE Healthcare Centricity DMS version 4.2 Description The Ad Hoc Reporting feature in GE Healthcare Centricity DMS has a password of Never!Mind for the Administrator user. The impact and attack vectors of this issue are unspecified...

CVE-2004-2777: Undefined Security Weakness

GE Healthcare Centricity Image Vault 3.x has a password of 1 gemnet for the administrator account, 2 webadmin for the webadmin administrator account of the ASACA DVD library, 3 an empty value for the gemsservice account of the Ultrasound Database, and possibly 4 gemnet2002 for the gemnet2002...

CVE-2014-9736: Undefined Security Weakness

GE Healthcare Centricity Clinical Archive Audit Trail Repository has a default password of initinit for the 1 SSL key manager and 2 server keystore; 3 keystorepassword for the server truststore; and atna for the 4 primary storage database and 5 archive storage database, which has unspecified impa...

PT-2015-3460

Name of the Vulnerable Software and Affected Versions GE Healthcare Centricity Image Vault versions 3.x Description The issue concerns hardcoded or default passwords for various accounts in the system. Specifically, the passwords are: gemnet for the administrator account, webadmin for the webadmi...

PT-2015-3540

Name of the Vulnerable Software and Affected Versions GE Healthcare Centricity PACS Workstation versions 4.0 through 4.0.1 GE Healthcare Centricity PACS Server version 4.0 Description The issue concerns a password for the geservice account, which is set to 2charGE. This password has an unspecifie...

PT-2015-4370

Name of the Vulnerable Software and Affected Versions GE Healthcare Centricity Clinical Archive affected versions not specified Description The issue concerns default passwords in GE Healthcare Centricity Clinical Archive. Specifically, it has default passwords for the SSL key manager, server...

CVE-2011-5322: Undefined Security Weakness

GE Healthcare Centricity Analytics Server 1.1 has a default password of 1 V0yag3r for the SQL Server sa user, 2 G3car3s for the analyst user, 3 G3car3s for the ccg user, 4 V0yag3r for the viewer user, and 5 geservice for the geservice user in the Webmin interface, which has unspecified impact and...

CVE-2013-7405: Undefined Security Weakness

The Ad Hoc Reporting feature in GE Healthcare Centricity DMS 4.2 has a password of Never!Mind for the Administrator user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a...

CVE-2007-6757: Undefined Security Weakness

GE Healthcare Centricity DMS 4.2, 4.1, and 4.0 has a password of Muse!Admin for the Museadmin user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value...

PT-2015-3539

Name of the Vulnerable Software and Affected Versions GE Healthcare Centricity PACS version 4.0 Server Description The issue concerns default passwords for specific user accounts. The accounts in question are the nasro ReadOnly user with a default password of nasro, and the nasrw Read/Write user...

CVE-2011-5323: Undefined Security Weakness

GE Healthcare Centricity PACS-IW 3.7.3.7, 3.7.3.8, and possibly other versions has a password of A11enda1e for the sa SQL server user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that...

CVE-2012-6695: Undefined Security Weakness

GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1 has a password of ddpadmin for the ddpadmin user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value...

CVE-2012-6693: Undefined Security Weakness

GE Healthcare Centricity PACS 4.0 Server has a default password of 1 nasro for the nasro ReadOnly user and 2 nasrw for the nasrw Read/Write user, which has unspecified impact and attack vectors...

PT-2015-3541

Name of the Vulnerable Software and Affected Versions GE Healthcare Centricity PACS Workstation versions 4.0 through 4.0.1 Description The issue concerns a password for the ddpadmin user, which is set to ddpadmin. The impact and attack vectors of this issue are not specified. It is unclear whethe...