PT-2015-3461 · Ge Healthcare · Ge Healthcare Infinia Ii

Published 2015-08-04 · Updated 2015-08-11 · CVE-2006-7253

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GE Healthcare Infinia II (affected versions not specified)

Description The issue concerns default passwords for various user accounts. The default passwords are: infinia for the infinia user, #bigguy1 for the acqservice user, dont4get2 for the Administrator user, #bigguy1 for the emergency user, and 2Bfamous for the InfiniaAdmin user. The impact and attack vectors of this issue are not specified.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2006-7253

Affected Products

Ge Healthcare Infinia Ii

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2006-7253 · Security Note
• https://twitter.com/digitalbond/status/619250429751222277 · Note
• http://apps.gehealthcare.com/servlet/ClientServlet/H-xw4100+Workstation.pdf?REQ=RAA&DIRECTION=2411012-100&FILENAME=H-xw4100%2BWorkstation.pdf&FILEREV=6&DOCREV_ORG=6 · Note
• http://forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts · Note