CVE-2013-7442

High

Published: 04/08/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1 have passwords for the Administrator user (CANal1) and the IIS user (iis), which may lead to unspecified threats related to TimbuktuPro.

Risk Assessment

The use of weak or default passwords may allow unauthorized access to the system, posing a risk to the security of medical data.

Recommendation

It is recommended to change default passwords to stronger ones and conduct a security audit of the system.

Other vulnerabilities in GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1

CVE-2012-6695High
GE Healthcare Centricity PACS Workstation versions 4.0 and 4.0.1 has a password of 'ddpadmin' for the ddpadmin user, which may lead to unspecified impacts and attack vectors.

Original NVD description (English source)

GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1 has a password of (1) CANal1 for the Administrator user and (2) iis for the IIS user, which has unspecified impact and attack vectors related to TimbuktuPro. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires it.