Default credentials

GE Healthcare Centricity PACS 4.0 Server has a default password of 1 nasro for the nasro ReadOnly user and 2 nasrw for the nasrw Read/Write user, which has unspecified impact and attack vectors...

Hardcoded credentials

GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1, and Server 4.0, has a password of 2charGE for the geservice account, which has unspecified impact and attack vectors related to TimbuktuPro. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system o...

Hardcoded credentials

GE Healthcare Discovery NM 750b has a password of 2getin for the insite account for 1 Telnet and 2 FTP, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value...

Privilege escalation

GE Healthcare Precision THUNIS-800+ has a default password of 1 1973 for the factory default System Utilities menu, 2 TH8740 for installation using TH8740122Setup.exe, 3 hrml for "Setup and Activation" using DSASetup, and 4 an empty string for Shutter Configuration, which has unspecified impact a...

Default credentials

GE Healthcare Centricity Analytics Server 1.1 has a default password of 1 V0yag3r for the SQL Server sa user, 2 G3car3s for the analyst user, 3 G3car3s for the ccg user, 4 V0yag3r for the viewer user, and 5 geservice for the geservice user in the Webmin interface, which has unspecified impact and...

Hardcoded credentials

GE Healthcare Discovery XR656 and XR656 G2 has a password of 1 2getin for the insite user, 2 4$xray for the xruser user, and 3 superxr for the root user, which has unspecified impact and attack vectors. NOTE: it is not clear whether these passwords are default, hardcoded, or dependent on another...

CVE-2014-9736

GE Healthcare Centricity Clinical Archive Audit Trail Repository has a default password of initinit for the 1 SSL key manager and 2 server keystore; 3 keystorepassword for the server truststore; and atna for the 4 primary storage database and 5 archive storage database, which has unspecified impa...

CVE-2006-7253

GE Healthcare Infinia II has a default password of 1 infinia for the infinia user, 2 bigguy1 for the acqservice user, 3 dont4get2 for the Administrator user, 4 bigguy1 for the emergency user, and 5 2Bfamous for the InfiniaAdmin user, which has unspecified impact and attack vectors...

CVE-2012-6693

GE Healthcare Centricity PACS 4.0 Server has a default password of 1 nasro for the nasro ReadOnly user and 2 nasrw for the nasrw Read/Write user, which has unspecified impact and attack vectors...

CVE-2002-2445

CVE-2002-2445 affects GE Healthcare Millennium MG, NC, and MyoSIGHT. The vulnerability stems from the use of default passwords for multiple accounts (root.genie, service., admin.genie, reboot, shutdown). According to connected CNVD-2015-05133, an attacker could exploit these defaults to take cont...

CVE-2010-5309

The CVE-2010-5309 entry concerns GE Healthcare CADStream with default/admin credentials. Connected sources (ICS-CERT/NCCIC) confirm affected GE Healthcare products across imaging and PACS/workstations, all versions, with remote authentication bypass via hard-coded/default passwords. The vulnerabi...

CVE-2010-5309

GE Healthcare CADStream Server has a default password of confirma for the admin user, which has unspecified impact and attack vectors...

CVE-2010-5306

GE Healthcare Optima CT680, CT540, CT640, and CT520 has a default password of bigguy for the root user, which has unspecified impact and attack vectors...

CVE-2014-9736

GE Healthcare Centricity Clinical Archive Audit Trail Repository is affected by a default-password issue: initinit for the SSL key manager and server keystore, keystore_password for the server truststore, and atna for the primary and archive storage databases. This credential exposure can enable ...

CVE-2012-6693

CVE-2012-6693 concerns GE Healthcare Centricity PACS Server with default credentials: nasro / nasro (ReadOnly) and nasrw (Read/Write). The connected documents confirm a default credential issue across Centricity PACS components, enabling remote access with these accounts. The primary root cause i...

CVE-2014-7233

CVE-2014-7233 concerns GE Healthcare Precision THUNIS-800+ with default credentials: factory System Utilities password (1973), installation password (TH8740), Setup/Activation password (hrml), and an empty Shutter password. Root cause is use of default/hard-coded credentials in multiple access po...

CVE-2010-5306

This CVE concerns GE Healthcare Optima imaging systems (Optima 520/540/640/680) with default or hard-coded credentials, enabling remote authentication bypass. The ICS-CERT advisory (ICSMA-18-037-02) confirms multiple GE products affected; exploitation could allow an attacker to bypass authenticat...

CVE-2001-1594

CVE-2001-1594 relates to GE Healthcare eNTEGRA P&R and is mapped to default/hard-coded credentials across multiple GE devices (eNTEGRA 2.0/2.5 Workstation, and related imaging products). The connected sources confirm that the vulnerability enables authentication bypass by using known passwords (e...

CVE-2011-5322

GE Healthcare Centricity PACS-IW (Centricity PACS-IW) is vulnerable via default/hard-coded credentials documented for CVE-2011-5322 in Centricity Analytics Server 1.1, notably in the Webmin interface where several accounts use known passwords (e.g., V0yag3r, G3car3s, geservice). Exploitation coul...

CVE-2014-7233

GE Healthcare Precision THUNIS-800+ has a default password of 1 1973 for the factory default System Utilities menu, 2 TH8740 for installation using TH8740122Setup.exe, 3 hrml for "Setup and Activation" using DSASetup, and 4 an empty string for Shutter Configuration, which has unspecified impact a...