CVE-2012-6694: Critical severity ge healthcare centricity pacs server vulnerability

Published Aug 4, 2015

Updated

GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1, and Server 4.0, has a password of 2charGE for the geservice account, which has unspecified impact and attack vectors related to TimbuktuPro. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires it.

Affected Software

3 affected components

Gehealthcare Centricity Pacs Server=4.0

Gehealthcare Centricity Pacs Workstation=4.0

Gehealthcare Centricity Pacs Workstation=4.0.1

Event History

Aug 4, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-6694?

CVE-2012-6694 has an unspecified impact and attack vectors due to a weak password for the geservice account.

How do I fix CVE-2012-6694?

To mitigate CVE-2012-6694, change the default password of the geservice account from '2charGE' to a stronger, more complex password.

Which versions are affected by CVE-2012-6694?

CVE-2012-6694 affects GE Healthcare Centricity PACS Workstation versions 4.0 and 4.0.1, and Server version 4.0.

What is the impact of using the default password in CVE-2012-6694?

Using the default password in CVE-2012-6694 could potentially allow unauthorized access to sensitive medical imaging data.

Is the password for the geservice account hardcoded in CVE-2012-6694?

It is unclear if the password for the geservice account in CVE-2012-6694 is default, hardcoded, or dependent on another system.