PT-2015-3462 · Ge Healthcare · Ge Healthcare Centricity Dms

Published 2015-08-04 · Updated 2018-03-28 · CVE-2007-6757

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GE Healthcare Centricity DMS versions 4.0 through 4.2

Description The issue concerns a password for the Museadmin user, with the password being Muse!Admin. The impact and attack vectors of this issue are not specified. It is unclear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value.

Recommendations For GE Healthcare Centricity DMS versions 4.0 through 4.2, consider changing the password for the Museadmin user to a strong and unique value to minimize potential risks.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2007-6757

Affected Products

Ge Healthcare Centricity Dms

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2007-6757 · Security Note
• http://forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts · Note
• http://apps.gehealthcare.com/servlet/ClientServlet/2019295-133G.pdf?REQ=RAA&DIRECTION=2019295-133&FILENAME=2019295-133G.pdf&FILEREV=G&DOCREV_ORG=G · Note
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02 · Note
• http://apps.gehealthcare.com/servlet/ClientServlet/DMS+Sys+Mgmt+Manual.pdf?REQ=RAA&DIRECTION=DOC1258180&FILENAME=DMS%2BSys%2BMgmt%2BManual.pdf&FILEREV=3&DOCREV_ORG=3 · Note
• https://twitter.com/digitalbond/status/619250429751222277 · Note
• http://apps.gehealthcare.com/servlet/ClientServlet/2019295-133D.pdf?REQ=RAA&DIRECTION=2019295-133D&FILENAME=2019295-133D.pdf&FILEREV=D&DOCREV_ORG=D · Note