PT-2015-3540 · Netopia+1 · Timbuktu Pro+2

Published 2015-08-04 · Updated 2018-03-28 · CVE-2012-6694

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GE Healthcare Centricity PACS Workstation versions 4.0 through 4.0.1 GE Healthcare Centricity PACS Server version 4.0

Description The issue concerns a password for the geservice account, which is set to 2charGE. This password has an unspecified impact and is related to TimbuktuPro. The nature of this password, whether it is default, hardcoded, or dependent on another system, is unclear.

Recommendations For GE Healthcare Centricity PACS Workstation versions 4.0 through 4.0.1, change the password of the geservice account to a secure one. For GE Healthcare Centricity PACS Server version 4.0, change the password of the geservice account to a secure one. As a temporary workaround, consider restricting access to the geservice account until a secure password is set.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2012-6694

Affected Products

Ge Healthcare Centricity Pacs Server

Ge Healthcare Centricity Pacs Workstation

Timbuktu Pro

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2012-6694 · Security Note
• http://forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts · Note
• http://apps.gehealthcare.com/servlet/ClientServlet/C40_WS_INST_SV_2063534-001r2.pdf?REQ=RAA&DIRECTION=2063534-001&FILENAME=C40_WS_INST_SV_2063534-001r2.pdf&FILEREV=1&DOCREV_ORG=1 · Note
• https://twitter.com/digitalbond/status/619250429751222277 · Note
• http://apps.gehealthcare.com/servlet/ClientServlet/C401_WS_INST_SV_2069560001r1.pdf?REQ=RAA&DIRECTION=2069560-001&FILENAME=C401_WS_INST_SV_2069560001r1.pdf&FILEREV=1&DOCREV_ORG=1 · Note
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02 · Note