Gehealthcare

26 CVEs across 266 Gehealthcare products. Browse Gehealthcare vulnerabilities, severities, and proof-of-concept exploits.

Gehealthcare products with known CVEs

ProductCVEs
Apexpro Telemetry Server6
Apexpro Telemetry Server Firmware6
Carescape Central Station Mai7006
Carescape Central Station Mai700 Firmware6
Carescape Central Station Mas7006
Carescape Central Station Mas700 Firmware6
Carescape Telemetry Server Mp100r6
Carescape Telemetry Server Mp100r Firmware6
Clinical Information Center Mp100d6
Clinical Information Center Mp100d Firmware6
Clinical Information Center Mp100r6
Clinical Information Center Mp100r Firmware6
Optima Mr360 Firmware4
Centricity Pacs Workstation3
Discovery Nm 750b3
Discovery Xr6563
Optima Ct520 Firmware3
Optima Ct540 Firmware3
1.5t Brivo Mr3552
1.5t Brivo Mr355 Firmware2
3.0t Signa Hd 162
3.0t Signa Hd 16 Firmware2
3.0t Signa Hd 232
3.0t Signa Hd 23 Firmware2
3.0t Signa Hdxt2
3.0t Signa Hdxt Firmware2
Amx 7002
Amx 700 Firmware2
Brightspeed Edge2
Brightspeed Edge Firmware2
Brightspeed Edge Select2
Brightspeed Edge Select Firmware2
Brightspeed Elite2
Brightspeed Elite Firmware2
Brightspeed Elite Select2
Brightspeed Elite Select Firmware2
Brivo Ct3852
Brivo Ct385 Firmware2
Brivo Definiu2
Brivo Definiu Firmware2
Brivo Nm 6152
Brivo Nm 615 Firmware2
Brivo Xr1182
Brivo Xr118 Firmware2
Brivo Xr3832
Brivo Xr383 Firmware2
Brivo Xr5152
Brivo Xr515 Firmware2
Brivo Xr5752
Brivo Xr575 Firmware2
Gehealthcare CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2020-25179Critical9.82020-12-14GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.
CVE-2020-25175Critical9.82020-12-14GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.
CVE-2020-6966Critical10.02020-01-24In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE…
CVE-2020-6965Critical9.92020-01-24In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE…
CVE-2020-6964High8.62020-01-24In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE…
CVE-2020-6963Critical10.02020-01-24In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE…
CVE-2020-6962Critical10.02020-01-24In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE…
CVE-2020-6961Critical10.02020-01-24In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE…
CVE-2014-97362015-08-04GE Healthcare Centricity Clinical Archive Audit Trail Repository has a default password of initinit for the (1) SSL key manager and (2) server keystore; (3) ke…
CVE-2014-72332015-08-04GE Healthcare Precision THUNIS-800+ has a default password of (1) 1973 for the factory default System Utilities menu, (2) TH8740 for installation using TH8740_…
CVE-2014-72322015-08-04GE Healthcare Discovery XR656 and XR656 G2 has a password of (1) 2getin for the insite user, (2) 4$xray for the xruser user, and (3) #superxr for the root user…
CVE-2013-74422015-08-04GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1 has a password of (1) CANal1 for the Administrator user and (2) iis for the IIS user, which has unspeci…
CVE-2013-74052015-08-04The Ad Hoc Reporting feature in GE Healthcare Centricity DMS 4.2 has a password of Never!Mind for the Administrator user, which has unspecified impact and atta…
CVE-2013-74042015-08-04GE Healthcare Discovery NM 750b has a password of 2getin for the insite account for (1) Telnet and (2) FTP, which has unspecified impact and attack vectors. N…
CVE-2012-66952015-08-04GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1 has a password of ddpadmin for the ddpadmin user, which has unspecified impact and attack vectors. NOT…
CVE-2012-66942015-08-04GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1, and Server 4.0, has a password of 2charGE for the geservice account, which has unspecified impact and…
CVE-2012-66932015-08-04GE Healthcare Centricity PACS 4.0 Server has a default password of (1) nasro for the nasro (ReadOnly) user and (2) nasrw for the nasrw (Read/Write) user, which…
CVE-2012-66602015-08-04GE Healthcare Precision MPi has a password of (1) orion for the serviceapp user, (2) orion for the clinical operator user, and (3) PlatinumOne for the administ…
CVE-2011-53242015-08-04The TeraRecon server, as used in GE Healthcare Centricity PACS-IW 3.7.3.7, 3.7.3.8, and possibly other versions, has a password of (1) shared for the shared us…
CVE-2011-53232015-08-04GE Healthcare Centricity PACS-IW 3.7.3.7, 3.7.3.8, and possibly other versions has a password of A11enda1e for the sa SQL server user, which has unspecified im…
CVE-2011-53222015-08-04GE Healthcare Centricity Analytics Server 1.1 has a default password of (1) V0yag3r for the SQL Server sa user, (2) G3car3s for the analyst user, (3) G3car3s f…
CVE-2010-53102015-08-04The Acquisition Workstation for the GE Healthcare Revolution XQ/i has a password of adw3.1 for the sdc user, which has unspecified impact and attack vectors…
CVE-2010-53092015-08-04GE Healthcare CADStream Server has a default password of confirma for the admin user, which has unspecified impact and attack vectors.
CVE-2010-53082015-08-04GE Healthcare Optima MR360 does not require authentication for the HIPAA emergency login procedure, which allows physically proximate users to gain access via…
CVE-2010-53072015-08-04The HIPAA configuration interface in GE Healthcare Optima MR360 has a password of (1) operator for the root account, (2) adw2.0 for the admin account, and (3)…
CVE-2010-53062015-08-04GE Healthcare Optima CT680, CT540, CT640, and CT520 has a default password of #bigguy for the root user, which has unspecified impact and attack vectors.
CVE-2009-51432015-08-04GE Healthcare Discovery 530C has a password of #bigguy1 for the (1) acqservice user and (2) wsservice user of the Xeleris System, which has unspecified impact…
CVE-2007-67572015-08-04GE Healthcare Centricity DMS 4.2, 4.1, and 4.0 has a password of Muse!Admin for the Museadmin user, which has unspecified impact and attack vectors. NOTE: it…
CVE-2006-72532015-08-04GE Healthcare Infinia II has a default password of (1) infinia for the infinia user, (2) #bigguy1 for the acqservice user, (3) dont4get2 for the Administrator…
CVE-2004-27772015-08-04GE Healthcare Centricity Image Vault 3.x has a password of (1) gemnet for the administrator account, (2) webadmin for the webadmin administrator account of the…
CVE-2003-16032015-08-04GE Healthcare Discovery VH has a default password of (1) interfile for the ftpclient user of the Interfile server or (2) "2" for the LOCAL user of the FTP serv…
CVE-2002-24462015-08-04GE Healthcare Millennium MG, NC, and MyoSIGHT has a password of insite.genieacq for the insite account that cannot be changed without disabling product functio…
CVE-2002-24452015-08-04GE Healthcare Millennium MG, NC, and MyoSIGHT has a default password of (1) root.genie for the root user, (2) "service." for the service user, (3) admin.genie…
CVE-2001-15942015-08-04GE Healthcare eNTEGRA P&R has a password of (1) entegra for the entegra user, (2) passme for the super user of the Polestar/Polestar-i Starlink 4 upgrade, (3)…