PROLiNK H5004NK Backdoor Accounts / RBAC Failure / CSRF

Exploit Title: PROLiNK H5004NK ADSL Wireless Modem Multiple Vulnerabilities Discovered by: Karn Ganeshen Reported on: October 13, 2015 Vendor Response: No process to handle vuln reports Vendor Homepage: http://www.prolink2u.com/newtemp/datacom/adsl-modem-router/381-h5004nk.html Version Affected:...

ZyXEL NBG-418N, PMG5318-B20A and P-660HW-T1 routers contain multiple vulnerabilities

Overview Several models of ZyXEL routers are vulnerable to multiple issues, including weak default passwords, command injections due to improper input validation, and cross-site scripting. Description CWE-255: Credentials Management - CVE-2015-6016According to the reporter, the following models...

PT-2015-3329 · D Link · D-Link Dvg-N5402Sp

Name of the Vulnerable Software and Affected Versions: D-Link DVG-N5402SP with firmware W1000CN-00 D-Link DVG-N5402SP with firmware W1000CN-03 D-Link DVG-N5402SP with firmware W2000EN-00 Description: The issue is related to the use of default passwords for the root and tw accounts in the D-Link...

GE Healthcare Centricity Analytics Server Built-in Account Vulnerability

GE Healthcare Centricity Analytics Server is a suite of imaging analytics solutions for the healthcare industry. GE Healthcare Centricity Analytics Server has built-in accounts, sa users use the 'V0yag3r' password, analyst uses the G3car3s password, ccg uses the G3car3s password, viewer uses the...

Trust Management Vulnerabilities in Multiple GE Products (CNVD-2015-05133)

GE Healthcare Millennium MG, NC and MyoSIGHT are General Electric GE scanning camera products for the healthcare industry. The security vulnerability in several GE products stems from the program's use of default passwords username: root password: root.genie, username: service password: service.,...

GE Healthcare eNTEGRA P&R Trust Management Vulnerability

GE Healthcare eNTEGRA P&R Processing & Review is a General Electric GE medical nuclear computer system for the healthcare industry. A security vulnerability exists in GE Healthcare eNTEGRA P&R that originates from entegra users using 'entegra' as a password; super users in the Polestar/Polestar-i...

GE Healthcare Discovery VH Trust Management Vulnerability

The GE Healthcare Discovery VH is a General Electric GE dual-detector gamma camera used in the healthcare industry to perform full-body scans of patients and provide superior image quality. A security vulnerability exists in the GE Healthcare Discovery VH that stems from the program's use of...

GE Healthcare Centricity Clinical Archive Audit Trail Repository Trust Management Vulnerability

GE Healthcare Centricity Clinical Archive Audit Trail Repository is a General Electric GE clinical archive audit trail repository for the healthcare industry. A security vulnerability exists in the GE Healthcare Centricity Clinical Archive Audit Trail Repository that stems from the program's use ...

GE Healthcare Infinia II Trust Management Vulnerability

GE Healthcare Infinia II is a General Electric GE dual detector imaging system for the healthcare industry. A security vulnerability exists in GE Healthcare Infinia II that stems from the program's use of default passwords username: infinia password: infinia, username: acqservice password: bigguy...

GE Healthcare Precision THUNIS-800+ Trust Management Vulnerability

The GE Healthcare Precision THUNIS-800+ PT800+ is an all-in-one digital remote-controlled multifunction X-ray machine the device that produces the X-rays from General Electric GE for the medical industry. A security vulnerability exists in the GE Healthcare PT800+ that originates from the program...

CVE-2014-7232

GE Healthcare Discovery XR656 and XR656 G2 has a password of 1 2getin for the insite user, 2 4$xray for the xruser user, and 3 superxr for the root user, which has unspecified impact and attack vectors. NOTE: it is not clear whether these passwords are default, hardcoded, or dependent on another...

CVE-2012-6660

GE Healthcare Precision MPi has a password of 1 orion for the serviceapp user, 2 orion for the clinical operator user, and 3 PlatinumOne for the administrator user, which has unspecified impact and attack vectors. NOTE: it is not clear whether these passwords are default, hardcoded, or dependent ...

CVE-2011-5322

GE Healthcare Centricity Analytics Server 1.1 has a default password of 1 V0yag3r for the SQL Server sa user, 2 G3car3s for the analyst user, 3 G3car3s for the ccg user, 4 V0yag3r for the viewer user, and 5 geservice for the geservice user in the Webmin interface, which has unspecified impact and...

CVE-2006-7253

GE Healthcare Infinia II has a default password of 1 infinia for the infinia user, 2 bigguy1 for the acqservice user, 3 dont4get2 for the Administrator user, 4 bigguy1 for the emergency user, and 5 2Bfamous for the InfiniaAdmin user, which has unspecified impact and attack vectors...

CVE-2004-2777

GE Healthcare Centricity Image Vault 3.x has a password of 1 gemnet for the administrator account, 2 webadmin for the webadmin administrator account of the ASACA DVD library, 3 an empty value for the gemsservice account of the Ultrasound Database, and possibly 4 gemnet2002 for the gemnet2002...

CVE-2001-1594

GE Healthcare eNTEGRA P&R has a password of 1 entegra for the entegra user, 2 passme for the super user of the Polestar/Polestar-i Starlink 4 upgrade, 3 0 for the entegra user of the Codonics printer FTP service, 4 eNTEGRA for the eNTEGRA P&R user account, 5 insite for the WinVNC Login, and...

CVE-2002-2445

GE Healthcare Millennium MG, NC, and MyoSIGHT has a default password of 1 root.genie for the root user, 2 "service." for the service user, 3 admin.genie for the admin user, 4 reboot for the reboot user, and 5 shutdown for the shutdown user, which has unspecified impact and attack vectors...

CVE-2014-7232

GE Healthcare Discovery XR656 and XR656 Plus devices are affected by a vulnerability due to default or hard-coded credentials (insite user: 2getin; xruser: 4$xray; root: #superxr). The ICS-CERT advisory enumerates affected products and states that successful exploitation could bypass authenticati...

CVE-2014-7232

GE Healthcare Discovery XR656 and XR656 G2 has a password of 1 2getin for the insite user, 2 4$xray for the xruser user, and 3 superxr for the root user, which has unspecified impact and attack vectors. NOTE: it is not clear whether these passwords are default, hardcoded, or dependent on another...

CVE-2011-5322

GE Healthcare Centricity Analytics Server 1.1 has a default password of 1 V0yag3r for the SQL Server sa user, 2 G3car3s for the analyst user, 3 G3car3s for the ccg user, 4 V0yag3r for the viewer user, and 5 geservice for the geservice user in the Webmin interface, which has unspecified impact and...