PT-2015-3462 · Ge Healthcare · Ge Healthcare Centricity Dms

Publicado 2015-08-04 · Atualizado 2018-03-28 · CVE-2007-6757

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GE Healthcare Centricity DMS versions 4.0 through 4.2

Description The issue concerns a password for the Museadmin user, with the password being Muse!Admin. The impact and attack vectors of this issue are not specified. It is unclear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value.

Recommendations For GE Healthcare Centricity DMS versions 4.0 through 4.2, consider changing the password for the Museadmin user to a strong and unique value to minimize potential risks.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2007-6757

Produtos afetados

Ge Healthcare Centricity Dms

Referências · 7

• http://forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts · Nota
• http://apps.gehealthcare.com/servlet/ClientServlet/2019295-133G.pdf?REQ=RAA&DIRECTION=2019295-133&FILENAME=2019295-133G.pdf&FILEREV=G&DOCREV_ORG=G · Nota
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6757 · Nota de Segurança
• http://apps.gehealthcare.com/servlet/ClientServlet/DMS+Sys+Mgmt+Manual.pdf?REQ=RAA&DIRECTION=DOC1258180&FILENAME=DMS%2BSys%2BMgmt%2BManual.pdf&FILEREV=3&DOCREV_ORG=3 · Nota
• https://twitter.com/digitalbond/status/619250429751222277 · Nota
• http://apps.gehealthcare.com/servlet/ClientServlet/2019295-133D.pdf?REQ=RAA&DIRECTION=2019295-133D&FILENAME=2019295-133D.pdf&FILEREV=D&DOCREV_ORG=D · Nota