PT-2015-3577 · Ge Healthcare · Ge Healthcare Centricity Dms

Published 2015-08-04 · Updated 2015-08-04 · CVE-2013-7405

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GE Healthcare Centricity DMS version 4.2

Description The Ad Hoc Reporting feature in GE Healthcare Centricity DMS has a password of Never!Mind for the Administrator user. The impact and attack vectors of this issue are unspecified.

Recommendations For GE Healthcare Centricity DMS version 4.2, consider changing the Administrator user password from Never!Mind to a secure password to minimize potential risks.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2013-7405

Affected Products

Ge Healthcare Centricity Dms

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-7405 · Security Note
• https://twitter.com/digitalbond/status/619250429751222277 · Note
• http://apps.gehealthcare.com/servlet/ClientServlet/0908141_DMS+4.2+MTG.pdf?REQ=RAA&DIRECTION=0908141&FILENAME=0908141_DMS%2B4.2%2BMTG.pdf&FILEREV=D&DOCREV_ORG=D · Note
• http://forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts · Note