CVE-2004-2777: Critical severity Gehealthcare Centricity Image Vault Firmware vulnerability
GE Healthcare Centricity Image Vault 3.x has a password of (1) gemnet for the administrator account, (2) webadmin for the webadmin administrator account of the ASACA DVD library, (3) an empty value for the gemsservice account of the Ultrasound Database, and possibly (4) gemnet2002 for the gemnet2002 account of the GEMNet license server, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-2777?
CVE-2004-2777 is considered a high severity vulnerability due to the use of weak default passwords.
How do I fix CVE-2004-2777?
To fix CVE-2004-2777, change the default passwords for all affected accounts, including administrator and service accounts.
Which versions of software are affected by CVE-2004-2777?
CVE-2004-2777 impacts all versions of GE Healthcare Centricity Image Vault 3.x.
What accounts are vulnerable in CVE-2004-2777?
CVE-2004-2777 exposes vulnerabilities in the administrator, webadmin administrator, and gemsservice accounts.
What type of vulnerability is CVE-2004-2777?
CVE-2004-2777 is a credential management vulnerability due to weak and default passwords.