CVE-2002-2445

GE Healthcare Millennium MG, NC, and MyoSIGHT has a default password of (1) root.genie for the root user, (2) "service." for the service user, (3) admin.genie…

published August 4, 2015

CVSS
—
EPSS
2%
Percentile
76.6
In the wild
Unconfirmed
What it is

🚨 Default passwords galore! The GE Healthcare Millennium MG and MyoSIGHT devices come with easy-to-guess passwords like 'root.genie' for root and 'admin.genie' for admin, making it a cakewalk for attackers. ⚠️ It's like a hospital where everyone has a key to every room because the locks haven't been changed – anyone can walk in and access sensitive areas without a hitch! If an attacker exploits these default credentials, they could gain unauthorized access to sensitive medical data and control over medical devices, potentially endangering patient safety and privacy. It's a scenario where a simple oversight could lead to absolutely devastating consequences.

Put simply

It's like a hospital where everyone has a key to every room because the locks haven't been changed – anyone can walk in and access sensitive areas without a hitch! This vulnerability allows unauthorized users to log in using easily guessable default passwords associated with various user accounts, including root and admin levels, presenting a considerable security risk.

What to do

If an attacker exploits these default credentials, they could gain unauthorized access to sensitive medical data and control over medical devices, potentially endangering patient safety and privacy. It's a scenario where a simple oversight could lead to absolutely devastating consequences. Immediately change the default passwords to strong, unique passwords for all accounts. Conduct an audit of systems to ensure no other default credentials are in use and review access logs for any unauthorized attempts. You’ve got this! Secure those devices and keep the patients safe. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01679 · 76.6th percentile
Published
2015-08-04T10:00Z
EPSS history
Timeline
  • 04 AUG 10:00Z
    GE Healthcare Millennium MG, NC, and MyoSIGHT has a default password of (1) root.genie for the root user, (2) "service." for the service user, (3) admin.genie…
    cvelistv5