CVE-2006-7253

GE Healthcare Infinia II has a default password of (1) infinia for the infinia user, (2) #bigguy1 for the acqservice user, (3) dont4get2 for the Administrator…

published August 4, 2015

CVSS
—
EPSS
2%
Percentile
75.8
In the wild
Unconfirmed
What it is

⚠️ Default passwords galore! A literal password parade for GE Healthcare's Infinia II could let anyone with insider knowledge waltz right in! 🔑 Think of it like an unlocked back door in a hospital: anyone with the right information can just walk in without a badge, bypassing all security checks. It’s a huge risk when sensitive data is on the other side! If someone exploits these default credentials, they could potentially access sensitive health information and manipulate critical systems without anyone noticing. This could compromise patient safety, and that’s absolutely devastating!

Put simply

Think of it like an unlocked back door in a hospital: anyone with the right information can just walk in without a badge, bypassing all security checks. It’s a huge risk when sensitive data is on the other side! This vulnerability arises from the use of easily guessable default passwords for multiple accounts within the GE Healthcare Infinia II system, allowing unauthorized access if not changed by the user.

What to do

If someone exploits these default credentials, they could potentially access sensitive health information and manipulate critical systems without anyone noticing. This could compromise patient safety, and that’s absolutely devastating! Immediately change all default passwords to strong, unique ones for the infinia, acqservice, Administrator, emergency, and InfiniaAdmin users. Regularly update your credentials and enforce a strong password policy moving forward! You've got this! By taking these steps, you’ll be a security hero in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01625 · 75.8th percentile
Published
2015-08-04T10:00Z
EPSS history
Timeline
  • 04 AUG 10:00Z
    GE Healthcare Infinia II has a default password of (1) infinia for the infinia user, (2) #bigguy1 for the acqservice user, (3) dont4get2 for the Administrator…
    cvelistv5