CVE-2003-1603

GE Healthcare Discovery VH has a default password of 1 interfile for the ftpclient user of the Interfile server or 2 "2" for the LOCAL user of the FTP server for the Codonics printer, which has unspecified impact and attack vectors...

CVE-2002-2445

GE Healthcare Millennium MG, NC, and MyoSIGHT has a default password of 1 root.genie for the root user, 2 "service." for the service user, 3 admin.genie for the admin user, 4 reboot for the reboot user, and 5 shutdown for the shutdown user, which has unspecified impact and attack vectors...

Default credentials

GE Healthcare Optima CT680, CT540, CT640, and CT520 has a default password of bigguy for the root user, which has unspecified impact and attack vectors...

Default credentials

GE Healthcare Centricity PACS 4.0 Server has a default password of 1 nasro for the nasro ReadOnly user and 2 nasrw for the nasrw Read/Write user, which has unspecified impact and attack vectors...

Hardcoded credentials

The TeraRecon server, as used in GE Healthcare Centricity PACS-IW 3.7.3.7, 3.7.3.8, and possibly other versions, has a password of 1 shared for the shared user and 2 scan for the scan user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default,...

Hardcoded credentials

GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1, and Server 4.0, has a password of 2charGE for the geservice account, which has unspecified impact and attack vectors related to TimbuktuPro. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system o...

Hardcoded credentials

GE Healthcare Discovery NM 750b has a password of 2getin for the insite account for 1 Telnet and 2 FTP, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value...

Privilege escalation

GE Healthcare Precision THUNIS-800+ has a default password of 1 1973 for the factory default System Utilities menu, 2 TH8740 for installation using TH8740122Setup.exe, 3 hrml for "Setup and Activation" using DSASetup, and 4 an empty string for Shutter Configuration, which has unspecified impact a...

Hardcoded credentials

GE Healthcare Discovery XR656 and XR656 G2 has a password of 1 2getin for the insite user, 2 4$xray for the xruser user, and 3 superxr for the root user, which has unspecified impact and attack vectors. NOTE: it is not clear whether these passwords are default, hardcoded, or dependent on another...

Default credentials

GE Healthcare Centricity Analytics Server 1.1 has a default password of 1 V0yag3r for the SQL Server sa user, 2 G3car3s for the analyst user, 3 G3car3s for the ccg user, 4 V0yag3r for the viewer user, and 5 geservice for the geservice user in the Webmin interface, which has unspecified impact and...

CVE-2014-9736

GE Healthcare Centricity Clinical Archive Audit Trail Repository has a default password of initinit for the 1 SSL key manager and 2 server keystore; 3 keystorepassword for the server truststore; and atna for the 4 primary storage database and 5 archive storage database, which has unspecified impa...

CVE-2006-7253

GE Healthcare Infinia II has a default password of 1 infinia for the infinia user, 2 bigguy1 for the acqservice user, 3 dont4get2 for the Administrator user, 4 bigguy1 for the emergency user, and 5 2Bfamous for the InfiniaAdmin user, which has unspecified impact and attack vectors...

CVE-2012-6693

GE Healthcare Centricity PACS 4.0 Server has a default password of 1 nasro for the nasro ReadOnly user and 2 nasrw for the nasrw Read/Write user, which has unspecified impact and attack vectors...

CVE-2002-2445

CVE-2002-2445 affects GE Healthcare Millennium MG, NC, and MyoSIGHT. The vulnerability stems from the use of default passwords for multiple accounts (root.genie, service., admin.genie, reboot, shutdown). According to connected CNVD-2015-05133, an attacker could exploit these defaults to take cont...

CVE-2010-5309

The CVE-2010-5309 entry concerns GE Healthcare CADStream with default/admin credentials. Connected sources (ICS-CERT/NCCIC) confirm affected GE Healthcare products across imaging and PACS/workstations, all versions, with remote authentication bypass via hard-coded/default passwords. The vulnerabi...

CVE-2010-5306

GE Healthcare Optima CT680, CT540, CT640, and CT520 has a default password of bigguy for the root user, which has unspecified impact and attack vectors...

CVE-2014-9736

GE Healthcare Centricity Clinical Archive Audit Trail Repository is affected by a default-password issue: initinit for the SSL key manager and server keystore, keystore_password for the server truststore, and atna for the primary and archive storage databases. This credential exposure can enable ...

CVE-2001-1594

CVE-2001-1594 relates to GE Healthcare eNTEGRA P&R and is mapped to default/hard-coded credentials across multiple GE devices (eNTEGRA 2.0/2.5 Workstation, and related imaging products). The connected sources confirm that the vulnerability enables authentication bypass by using known passwords (e...

CVE-2014-7233

CVE-2014-7233 concerns GE Healthcare Precision THUNIS-800+ with default credentials: factory System Utilities password (1973), installation password (TH8740), Setup/Activation password (hrml), and an empty Shutter password. Root cause is use of default/hard-coded credentials in multiple access po...

CVE-2012-6693

CVE-2012-6693 concerns GE Healthcare Centricity PACS Server with default credentials: nasro / nasro (ReadOnly) and nasrw (Read/Write). The connected documents confirm a default credential issue across Centricity PACS components, enabling remote access with these accounts. The primary root cause i...