CVE-2012-6695

GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1 has a password of ddpadmin for the ddpadmin user, which has unspecified impact and attack vectors

published August 4, 2015

CVSS
—
EPSS
2%
Percentile
76.6
In the wild
Unconfirmed
What it is

⚠️ A default password of 'ddpadmin' could open the door to unauthorized access! This vulnerability in GE Healthcare's Centricity PACS Workstation is a reminder that not all heroes wear capes—some simply change their passwords! 🔑 Think of this like leaving the front door of your healthcare facility wide open. Anyone could wander in and access sensitive patient information, all because the 'Do Not Enter' sign was never posted! 🏥 An attacker could potentially gain access to the system, leading to exposure of sensitive healthcare data. While the specific impacts are unclear, unauthorized access in a medical environment could have absolutely devastating consequences for patient privacy and safety.

Put simply

Think of this like leaving the front door of your healthcare facility wide open. Anyone could wander in and access sensitive patient information, all because the 'Do Not Enter' sign was never posted! 🏥 The vulnerability relates to the ddpadmin user having a password of 'ddpadmin' in versions 4.0 and 4.0.1 of the Centricity PACS Workstation. It remains ambiguous whether this password is default, hardcoded, or tied to another system.

What to do

An attacker could potentially gain access to the system, leading to exposure of sensitive healthcare data. While the specific impacts are unclear, unauthorized access in a medical environment could have absolutely devastating consequences for patient privacy and safety. It’s crucial to change the default password to something more secure immediately. Additionally, conduct a thorough review of user permissions and access controls to ensure no unauthorized users are present. Regular audits and password policy enforcement can help mitigate similar issues in the future. You've got this! By taking these steps, you can help secure your system and protect patient data. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01679 · 76.6th percentile
Published
2015-08-04T10:00Z
EPSS history
Timeline
  • 04 AUG 10:00Z
    GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1 has a password of ddpadmin for the ddpadmin user, which has unspecified impact and attack vectors
    cvelistv5