CVE-2007-6757

GE Healthcare Centricity DMS 4.2, 4.1, and 4.0 has a password of Muse!Admin for the Museadmin user, which has unspecified impact and attack vectors

published August 4, 2015

CVSS
—
EPSS
2%
Percentile
78.9
In the wild
Unconfirmed
What it is

⚠️ A password like 'Muse!Admin' might sound harmless, but it opens the door to a world of possibilities! 🤔 Think of it as a restaurant with a secret menu that’s available to anyone who asks — if the server doesn’t verify who you are, you can order anything. In this case, that password could allow unauthorized access without any checks, leading to all sorts of mischief. If this password is indeed a default or hardcoded value, an attacker could potentially gain access to sensitive information or systems, jeopardizing patient data or operational integrity. While the exact attack vector remains unspecified, the implications could be unsettling in a healthcare environment.

Put simply

Think of it as a restaurant with a secret menu that’s available to anyone who asks — if the server doesn’t verify who you are, you can order anything. In this case, that password could allow unauthorized access without any checks, leading to all sorts of mischief. This vulnerability exists due to the Museadmin user account being accessible with the predictable password 'Muse!Admin', which could be exploited if left unchanged or if it's hardcoded within the system. This creates a weak point for unauthorized access.

What to do

If this password is indeed a default or hardcoded value, an attacker could potentially gain access to sensitive information or systems, jeopardizing patient data or operational integrity. While the exact attack vector remains unspecified, the implications could be unsettling in a healthcare environment. It's crucial to change the Museadmin password immediately if it hasn't been updated. Ensure to implement strong password policies and regularly review user accounts for vulnerabilities. If unsure, consult GE Healthcare for guidance on the best practices for securing access. You've got this! With a few simple steps, you can fortify your defenses and secure your system! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01856 · 78.9th percentile
Published
2015-08-04T10:00Z
EPSS history
Timeline
  • 04 AUG 10:00Z
    GE Healthcare Centricity DMS 4.2, 4.1, and 4.0 has a password of Muse!Admin for the Museadmin user, which has unspecified impact and attack vectors
    cvelistv5