PT-2015-3457 · Ge Healthcare · Ge Healthcare Millennium Nc+1

Published 2015-08-04 · Updated 2015-09-03 · CVE-2002-2445

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GE Healthcare Millennium MG, NC, and MyoSIGHT (affected versions not specified)

Description The issue concerns default passwords for various user accounts, including root.genie for the root user, service. for the service user, admin.genie for the admin user, reboot for the reboot user, and shutdown for the shutdown user. The impact and attack vectors of this issue are not specified.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-2445

Affected Products

Ge Healthcare Millennium Nc

Ge Healthcare Myosight

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-2445 · Security Note
• http://forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts · Note
• https://twitter.com/digitalbond/status/619250429751222277 · Note
• http://apps.gehealthcare.com/servlet/ClientServlet/2354459-100.pdf?REQ=RAA&DIRECTION=2354459-100&FILENAME=2354459-100.pdf&FILEREV=4&DOCREV_ORG=4 · Note
• http://apps.gehealthcare.com/servlet/ClientServlet/2338955-100.pdf?REQ=RAA&DIRECTION=2338955-100&FILENAME=2338955-100.pdf&FILEREV=1&DOCREV_ORG=1 · Note