CVE-2004-2777

GE Healthcare Centricity Image Vault 3.x has a password of (1) gemnet for the administrator account, (2) webadmin for the webadmin administrator account of the…

published August 4, 2015

CVSS
—
EPSS
2%
Percentile
76.6
In the wild
Unconfirmed
What it is

⚠️ A lingering security risk is hiding in GE Healthcare's Centricity Image Vault! Several accounts, including administrator and webadmin, are using predictably weak passwords like 'gemnet' and 'webadmin' — yikes! 😱 Think of it like leaving the keys to a medical storage room under the doormat — anyone who knows where to look can just walk right in and access sensitive information. It's a recipe for disaster if someone uncovers these default credentials! An attacker could potentially gain unauthorized access to critical medical data, putting patient privacy and safety at risk. While specifics on the impact are unclear, the possibility of exposing sensitive information or interfering with healthcare operations is absolutely unsettling!

Put simply

Think of it like leaving the keys to a medical storage room under the doormat — anyone who knows where to look can just walk right in and access sensitive information. It's a recipe for disaster if someone uncovers these default credentials! This vulnerability relates to multiple accounts in the GE Healthcare Centricity Image Vault having weak, potentially default passwords. This includes poorly secured accounts like the administrator and gemsservice accounts, which could be exploited if discovered.

What to do

An attacker could potentially gain unauthorized access to critical medical data, putting patient privacy and safety at risk. While specifics on the impact are unclear, the possibility of exposing sensitive information or interfering with healthcare operations is absolutely unsettling! Immediately change the default passwords for these accounts to strong, unique values. Review your security policies to ensure password complexity requirements are enforced, and consider conducting a security audit of your system. 🛡️ You've got this! By taking these steps, you can help safeguard sensitive healthcare data and bolster security. 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01679 · 76.6th percentile
Published
2015-08-04T10:00Z
EPSS history
Timeline
  • 04 AUG 10:00Z
    GE Healthcare Centricity Image Vault 3.x has a password of (1) gemnet for the administrator account, (2) webadmin for the webadmin administrator account of the…
    cvelistv5