PT-2015-3459 · Ge Healthcare+1 · Interfile Server+2

Scott Erven · Published 2015-08-04 · Updated 2018-03-28 · CVE-2003-1603

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GE Healthcare Discovery VH (affected versions not specified)

Description The issue concerns default passwords for certain users. Specifically, the ftpclient user of the Interfile server has a default password of interfile, and the LOCAL user of the FTP server for the Codonics printer has a default password of 2. The impact and attack vectors of this issue are not specified.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2003-1603

Affected Products

Codonics Printer

Ge Healthcare Discovery Vh

Interfile Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2003-1603 · Security Note
• http://forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts · Note
• http://apps.gehealthcare.com/servlet/ClientServlet/2337093-100.pdf?REQ=RAA&DIRECTION=2337093-100&FILENAME=2337093-100.pdf&FILEREV=1&DOCREV_ORG=1 · Note
• https://twitter.com/digitalbond/status/619250429751222277 · Note
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02 · Note