GE Infinia/Infinia with Hawkeye 4 Authentication Bypass Vulnerability

GE Infinia/Infinia with Hawkeye 4 is an American General Electric GE medical imaging device using gamma rays equipped with the Hawkeye 4 system. A security vulnerability exists in GE Infinia/Infinia with Hawkeye 4 that stems from the program's use of default credentials or hard-coded credentials....

Authentication flaw

GE Infinia/Infinia with Hawkeye 4 medical imaging systems all current versions are affected these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices...

Authentication flaw

GE GEMNet License server EchoServer all current versions are affected these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices...

CVE-2017-14006

GE Xeleris versions 1.0,1.1,2.1,3.0,3.1, medical imaging systems, all current versions are affected, these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices...

Authentication flaw

GE Centricity PACS RA1000, diagnostic image analysis, all current versions are affected these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices...

Authentication flaw

GE Xeleris versions 1.0,1.1,2.1,3.0,3.1, medical imaging systems, all current versions are affected, these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices...

CVE-2017-14004

GE GEMNet License server EchoServer all current versions are affected these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices...

CVE-2017-14006

GE Xeleris versions 1.0,1.1,2.1,3.0,3.1, medical imaging systems, all current versions are affected, these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices...

CVE-2017-14002

GE Infinia/Infinia with Hawkeye 4 medical imaging systems all current versions are affected these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices...

CVE-2017-14008

GE Centricity PACS RA1000, diagnostic image analysis, all current versions are affected these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices...

CVE-2017-14002

GE Infinia/Infinia with Hawkeye 4 medical imaging systems all current versions are affected these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices...

CVE-2017-14004

GE GEMNet License server EchoServer all current versions are affected these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices...

CVE-2017-14008

GE Centricity PACS RA1000, diagnostic image analysis, all current versions are affected these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices...

CVE-2017-14002

The CVE-2017-14002 issue affects GE Healthcare Infinia/Infinia with Hawkeye 4 medical imaging systems (all versions) due to default or hard-coded credentials, enabling remote authentication bypass. Connected CNVD/PRION/CVE entries corroborate an authentication flaw across multiple Infinia/Hawkeye...

CVE-2017-14008

CVE-2017-14008 affects GE Centricity PACS RA1000 workstation and related GE Healthcare imaging systems. Affected devices use default or hard-coded credentials, enabling remote authentication bypass and unauthorized access to the device. Public details in the connected documents confirm the root c...

CVE-2017-14006

GE Xeleris versions 1.0,1.1,2.1,3.0,3.1, medical imaging systems, all current versions are affected, these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices...

CVE-2017-14004

The CVE-2017-14004 entry concerns GE GEMNet License Server (EchoServer). Affected versions allegedly use default or hard-coded credentials, enabling remote authentication bypass and unauthorized access to the device. Public docs confirm the vulnerability can be exploited remotely (no user interac...

CVE-2017-14006

GE Xeleris 1.0/1.1/2.1/3.0/3.1 medical imaging workstations are affected by an authentication bypass due to default or hard-coded credentials. A remote attacker could exploit this to bypass authentication and gain access to the device. Public advisories/analyses across multiple sources corroborat...

PT-2018-5610

Name of the Vulnerable Software and Affected Versions: GE Centricity PACS RA1000 versions affected versions not specified Description: The issue concerns the use of default or hard-coded credentials in diagnostic image analysis devices. This could allow a remote attacker to bypass authentication...

PT-2018-5609

Name of the Vulnerable Software and Affected Versions: GE Xeleris versions 1.0, 1.1, 2.1, 3.0, 3.1 Description: The issue concerns medical imaging systems where devices use default or hard-coded credentials. This may allow a remote attacker to bypass authentication and gain access to the affected...