PT-2015-3457 · Ge Healthcare · Ge Healthcare Millennium Nc+1

Publicado 2015-08-04 · Atualizado 2015-09-03 · CVE-2002-2445

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GE Healthcare Millennium MG, NC, and MyoSIGHT (affected versions not specified)

Description The issue concerns default passwords for various user accounts, including root.genie for the root user, service. for the service user, admin.genie for the admin user, reboot for the reboot user, and shutdown for the shutdown user. The impact and attack vectors of this issue are not specified.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2002-2445

Produtos afetados

Ge Healthcare Millennium Nc

Ge Healthcare Myosight

Referências · 5

• http://forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts · Nota
• https://twitter.com/digitalbond/status/619250429751222277 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-2445 · Nota de Segurança
• http://apps.gehealthcare.com/servlet/ClientServlet/2354459-100.pdf?REQ=RAA&DIRECTION=2354459-100&FILENAME=2354459-100.pdf&FILEREV=4&DOCREV_ORG=4 · Nota
• http://apps.gehealthcare.com/servlet/ClientServlet/2338955-100.pdf?REQ=RAA&DIRECTION=2338955-100&FILENAME=2338955-100.pdf&FILEREV=1&DOCREV_ORG=1 · Nota