CVE-2002-2446

High

Published: 04/08/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

GE Healthcare Millennium MG, NC, and MyoSIGHT have a password of 'insite.genieacq' for the insite account that cannot be changed without disabling product functionality for remote InSite support.

Risk Assessment

The inability to change the password poses a risk of unauthorized access to the system, which may lead to unspecified impacts and attack vectors.

Recommendation

It is recommended to assess the risk and consider alternative methods of securing access to the system to minimize potential threats.

Other vulnerabilities in GE Healthcare Millennium MG, NC, MyoSIGHT

CVE-2002-2445High
GE Healthcare Millennium MG, NC, and MyoSIGHT have default passwords for users, creating a risk of unauthorized access. These passwords include 'root.genie' for the root user, 'service.' for the service user, 'admin.genie' for the admin user, 'reboot' for the reboot user, and 'shutdown' for the shutdown user.

Original NVD description (English source)

GE Healthcare Millennium MG, NC, and MyoSIGHT has a password of insite.genieacq for the insite account that cannot be changed without disabling product functionality for remote InSite support, which has unspecified impact and attack vectors.