CVE-2011-5322 - GE Healthcare Centricity Analytics Server 1.1 has a default password of (1) V0yag3r for the SQL Serv

CVE-2011-5322

Summary

GE Healthcare Centricity Analytics Server 1.1 has a default password of (1) V0yag3r for the SQL Server sa user, (2) G3car3s for the analyst user, (3) G3car3s for the ccg user, (4) V0yag3r for the viewer user, and (5) geservice for the geservice user in the Webmin interface, which has unspecified impact and attack vectors.

References

Vulnerable Configurations

cpe:2.3:a:gehealthcare:centricity_analytics_server:1.1:*:*:*:*:*:*:*
cpe:2.3:a:gehealthcare:centricity_analytics_server:1.1:*:*:*:*:*:*:*

CVSS

Base:	10.0 (as of 28-03-2018 - 01:29)
Impact:
Exploitability:

CWE

CWE-255

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:C/I:C/A:C

refmap via4

confirm	http://apps.gehealthcare.com/servlet/ClientServlet/CA11_IN_2059103-001r4.pdf?REQ=RAA&DIRECTION=2059103-001&FILENAME=CA11_IN_2059103-001r4.pdf&FILEREV=4&DOCREV_ORG=4
misc	http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/ https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02 https://twitter.com/digitalbond/status/619250429751222277

Last major update

28-03-2018 - 01:29

Published

04-08-2015 - 14:59

Last modified

28-03-2018 - 01:29