CVE-2007-6757: Critical severity Gehealthcare Centricity Dms Firmware vulnerability

Published Aug 4, 2015

Updated

GE Healthcare Centricity DMS 4.2, 4.1, and 4.0 has a password of Muse!Admin for the Museadmin user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value.

Affected Software

3 affected components

Gehealthcare Centricity Dms Firmware=4.2

Gehealthcare Centricity Dms Firmware=4.0

Gehealthcare Centricity Dms Firmware=4.1

Event History

Aug 4, 2015

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-6757?

CVE-2007-6757 has unspecified severity due to the unclear impact and attack vectors associated with the Museadmin user account.

How do I fix CVE-2007-6757?

To mitigate CVE-2007-6757, change the default password for the Museadmin user account to a strong, unique password.

Which versions of GE Healthcare Centricity DMS are affected by CVE-2007-6757?

CVE-2007-6757 affects versions 4.0, 4.1, and 4.2 of GE Healthcare Centricity DMS.

What are the risks associated with CVE-2007-6757?

The risks associated with CVE-2007-6757 include unauthorized access to sensitive information and potential system compromise.

Is the password for Museadmin in CVE-2007-6757 default, hardcoded, or dependent on another system?

It is not clear whether the Museadmin password for CVE-2007-6757 is default, hardcoded, or dependent on another system.