gehealthcare vulnerabilities

Recent CVEs affecting gehealthcare products. 34 tracked.

gehealthcare has 34 tracked vulnerabilities, 7 critical. A fixed release or vendor patch exists for 6. Most recent: 2020-12-14. Highest priority: CVE-2020-6962 (score 63/100).

CVE-2020-6966 CRITICAL 10.0 UPGRADE MITIGATE In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Informat
CVE-2020-6965 CRITICAL 9.9 UPGRADE MITIGATE In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Informat
CVE-2020-6964 HIGH 8.6 UPGRADE MITIGATE In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Informat
CVE-2020-6963 CRITICAL 10.0 UPGRADE MITIGATE In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Informat
CVE-2020-6962 CRITICAL 10.0 UPGRADE MITIGATE In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Informa
CVE-2020-6961 CRITICAL 10.0 UPGRADE MITIGATE In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Informa
CVE-2020-25179 CRITICAL 9.8 MITIGATE MITIGATE GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport ov
CVE-2020-25175 CRITICAL 9.8 MITIGATE MITIGATE GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport ov
CVE-2014-9736 HIGH 10.0 MITIGATE GE Healthcare Centricity Clinical Archive Audit Trail Repository has a default password of initinit for the (1
CVE-2014-7233 HIGH 10.0 MITIGATE GE Healthcare Precision THUNIS-800+ has a default password of (1) 1973 for the factory default System Utilitie
CVE-2014-7232 HIGH 10.0 MITIGATE MITIGATE GE Healthcare Discovery XR656 and XR656 G2 has a password of (1) 2getin for the insite user, (2) 4$xray for th
CVE-2013-7442 HIGH 10.0 DOWNGRADE GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1 has a password of (1) CANal1 for the Administrator use
CVE-2013-7405 HIGH 10.0 DOWNGRADE The Ad Hoc Reporting feature in GE Healthcare Centricity DMS 4.2 has a password of Never!Mind for the Administ
CVE-2013-7404 HIGH 10.0 MITIGATE GE Healthcare Discovery NM 750b has a password of 2getin for the insite account for (1) Telnet and (2) FTP, wh
CVE-2012-6695 HIGH 10.0 DOWNGRADE GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1 has a password of ddpadmin for the ddpadmin user, whic
CVE-2012-6694 HIGH 10.0 DOWNGRADE DOWNGRADE GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1, and Server 4.0, has a password of 2charGE for the ges
CVE-2012-6693 HIGH 10.0 DOWNGRADE GE Healthcare Centricity PACS 4.0 Server has a default password of (1) nasro for the nasro (ReadOnly) user and
CVE-2012-6660 HIGH 10.0 MITIGATE GE Healthcare Precision MPi has a password of (1) orion for the serviceapp user, (2) orion for the clinical op
CVE-2011-5324 HIGH 10.0 DOWNGRADE The TeraRecon server, as used in GE Healthcare Centricity PACS-IW 3.7.3.7, 3.7.3.8, and possibly other version
CVE-2011-5323 HIGH 10.0 DOWNGRADE GE Healthcare Centricity PACS-IW 3.7.3.7, 3.7.3.8, and possibly other versions has a password of A11enda1e for
CVE-2011-5322 HIGH 10.0 DOWNGRADE GE Healthcare Centricity Analytics Server 1.1 has a default password of (1) V0yag3r for the SQL Server sa user
CVE-2010-5310 HIGH 10.0 MITIGATE The Acquisition Workstation for the GE Healthcare Revolution XQ/i has a password of adw3.1 for the sdc user, w
CVE-2010-5309 HIGH 10.0 MITIGATE GE Healthcare CADStream Server has a default password of confirma for the admin user, which has unspecified im
CVE-2010-5308 HIGH 10.0 MITIGATE GE Healthcare Optima MR360 does not require authentication for the HIPAA emergency login procedure, which allo
CVE-2010-5307 HIGH 10.0 MITIGATE The HIPAA configuration interface in GE Healthcare Optima MR360 has a password of (1) operator for the root ac
CVE-2010-5306 HIGH 10.0 MITIGATE MITIGATE GE Healthcare Optima CT680, CT540, CT640, and CT520 has a default password of #bigguy for the root user, which
CVE-2009-5143 HIGH 10.0 MITIGATE GE Healthcare Discovery 530C has a password of #bigguy1 for the (1) acqservice user and (2) wsservice user of
CVE-2007-6757 HIGH 10.0 MITIGATE GE Healthcare Centricity DMS 4.2, 4.1, and 4.0 has a password of Muse!Admin for the Museadmin user, which has
CVE-2006-7253 HIGH 10.0 MITIGATE GE Healthcare Infinia II has a default password of (1) infinia for the infinia user, (2) #bigguy1 for the acqs
CVE-2004-2777 HIGH 10.0 MITIGATE GE Healthcare Centricity Image Vault 3.x has a password of (1) gemnet for the administrator account, (2) webad
CVE-2003-1603 HIGH 10.0 MITIGATE GE Healthcare Discovery VH has a default password of (1) interfile for the ftpclient user of the Interfile ser
CVE-2002-2446 HIGH 10.0 MITIGATE MITIGATE GE Healthcare Millennium MG, NC, and MyoSIGHT has a password of insite.genieacq for the insite account that ca
CVE-2002-2445 HIGH 10.0 MITIGATE MITIGATE GE Healthcare Millennium MG, NC, and MyoSIGHT has a default password of (1) root.genie for the root user, (2)
CVE-2001-1594 HIGH 10.0 MITIGATE GE Healthcare eNTEGRA P&R has a password of (1) entegra for the entegra user, (2) passme for the super user of

FAQ

How do I fix gehealthcare vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is gehealthcare being exploited right now?

None of the tracked gehealthcare CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which gehealthcare CVE should I patch first?

CVE-2020-6962 currently ranks highest (63/100): In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Informa.

Products

RSS feed for gehealthcare · ← Back to latest CVEs