PT-2015-3577 · Ge Healthcare · Ge Healthcare Centricity Dms

Publicado 2015-08-04 · Atualizado 2015-08-04 · CVE-2013-7405

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GE Healthcare Centricity DMS version 4.2

Description The Ad Hoc Reporting feature in GE Healthcare Centricity DMS has a password of Never!Mind for the Administrator user. The impact and attack vectors of this issue are unspecified.

Recommendations For GE Healthcare Centricity DMS version 4.2, consider changing the Administrator user password from Never!Mind to a secure password to minimize potential risks.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2013-7405

Produtos afetados

Ge Healthcare Centricity Dms

Referências · 4

• https://twitter.com/digitalbond/status/619250429751222277 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-7405 · Nota de Segurança
• http://apps.gehealthcare.com/servlet/ClientServlet/0908141_DMS+4.2+MTG.pdf?REQ=RAA&DIRECTION=0908141&FILENAME=0908141_DMS%2B4.2%2BMTG.pdf&FILEREV=D&DOCREV_ORG=D · Nota
• http://forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts · Nota