CVE-2012-6693

GE Healthcare Centricity PACS 4.0 Server has a default password of (1) nasro for the nasro (ReadOnly) user and (2) nasrw for the nasrw (Read/Write) user, which…

published August 4, 2015

CVSS
—
EPSS
2%
Percentile
76.6
In the wild
Unconfirmed
What it is

🚨 Default passwords lurking in the GE Healthcare Centricity PACS Server could be an open invitation for mischief! 🔥 Think of it like leaving the front door unlocked with a sign that says, 'Come on in!' — it’s an easy way for someone to stroll right into sensitive areas without breaking a sweat. With the default passwords 'nasro' for ReadOnly and 'nasrw' for Read/Write, anyone who knows this could access the server and potentially manipulate or steal sensitive patient data. The implications are absolutely devastating if this falls into the wrong hands!

Put simply

Think of it like leaving the front door unlocked with a sign that says, 'Come on in!' — it’s an easy way for someone to stroll right into sensitive areas without breaking a sweat. This vulnerability stems from the use of default credentials for user accounts on the GE Healthcare Centricity PACS 4.0 Server, allowing unauthorized access if these credentials are not changed.

What to do

With the default passwords 'nasro' for ReadOnly and 'nasrw' for Read/Write, anyone who knows this could access the server and potentially manipulate or steal sensitive patient data. The implications are absolutely devastating if this falls into the wrong hands! Immediately change the default passwords for both the nasro and nasrw users. Implement strong password policies and regularly review user access to ensure minimal privileges. Don't stop there — audit your entire security setup! You've got this! By taking these quick steps, you'll bolster your defenses and keep your data safe. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01679 · 76.6th percentile
Published
2015-08-04T10:00Z
EPSS history
Timeline
  • 04 AUG 10:00Z
    GE Healthcare Centricity PACS 4.0 Server has a default password of (1) nasro for the nasro (ReadOnly) user and (2) nasrw for the nasrw (Read/Write) user, which…
    cvelistv5