CVE-2012-6660: Critical severity ge healthcare precision mpi vulnerability

Published Aug 4, 2015

Updated

GE Healthcare Precision MPi has a password of (1) orion for the serviceapp user, (2) orion for the clinical operator user, and (3) PlatinumOne for the administrator user, which has unspecified impact and attack vectors. NOTE: it is not clear whether these passwords are default, hardcoded, or dependent on another system or product that requires a fixed value.

Affected Software

1 affected component

Gehealthcare Precision Mpi

Event History

Aug 4, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-6660?

The severity of CVE-2012-6660 is considered significant due to exposed default passwords that can lead to unauthorized access.

How do I fix CVE-2012-6660?

To fix CVE-2012-6660, it is recommended to change the default passwords for the serviceapp, clinical operator, and administrator users to strong, unique passwords.

What software is affected by CVE-2012-6660?

CVE-2012-6660 affects GE Healthcare Precision MPI software.

What is the impact of CVE-2012-6660?

The impact of CVE-2012-6660 includes potential unauthorized access to sensitive health information and control over medical devices.

Is there a patch available for CVE-2012-6660?

There is no specific patch mentioned for CVE-2012-6660, but changing the default passwords is a critical step in mitigation.