CVE-2013-7404

GE Healthcare Discovery NM 750b has a password of 2getin for the insite account for (1) Telnet and (2) FTP, which has unspecified impact and attack vectors

published August 4, 2015

CVSS
—
EPSS
2%
Percentile
76.6
In the wild
Unconfirmed
What it is

⚠️ A single, easily guessed password could be the key to unlocking sensitive systems! The GE Healthcare Discovery NM 750b uses '2getin' for the insite account on Telnet and FTP — and that's a huge red flag! 🔥 Think of this like leaving the front door of a secure facility wide open, with just a flimsy sign saying 'please do knock' instead of a proper lock. Anyone passing by could stroll right in and access private medical data without so much as breaking a sweat! If attackers discover this password, they could gain unauthorized access to critical medical systems, potentially compromising patient data and operational security. The vague nature of the impact adds to the risks, making it absolutely imperative to address this vulnerability!

Put simply

Think of this like leaving the front door of a secure facility wide open, with just a flimsy sign saying 'please do knock' instead of a proper lock. Anyone passing by could stroll right in and access private medical data without so much as breaking a sweat! This vulnerability stems from a potentially weak or hardcoded password for the insite account on GE Healthcare Discovery NM 750b systems, allowing unauthorized access over Telnet and FTP if the password is known or guessed.

What to do

If attackers discover this password, they could gain unauthorized access to critical medical systems, potentially compromising patient data and operational security. The vague nature of the impact adds to the risks, making it absolutely imperative to address this vulnerability! To mitigate this risk, change the default password immediately, ensuring it meets security best practices. Additionally, consider disabling Telnet in favor of more secure protocols like SSH and monitor access logs for any unauthorized attempts. Stay vigilant! You've got this! With a few simple changes, you can lock down your systems and keep them safe. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01679 · 76.6th percentile
Published
2015-08-04T10:00Z
EPSS history
Timeline
  • 04 AUG 10:00Z
    GE Healthcare Discovery NM 750b has a password of 2getin for the insite account for (1) Telnet and (2) FTP, which has unspecified impact and attack vectors
    cvelistv5