CVE-2013-7405: Critical severity Gehealthcare Centricity Dms vulnerability

Published Aug 4, 2015

Updated

The Ad Hoc Reporting feature in GE Healthcare Centricity DMS 4.2 has a password of Never!Mind for the Administrator user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value.

Affected Software

1 affected component

Gehealthcare Centricity Dms=4.2

Event History

Aug 4, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-7405?

The severity of CVE-2013-7405 is considered moderate due to the use of a weak and potentially default password.

How do I fix CVE-2013-7405?

To fix CVE-2013-7405, change the Administrator password from 'Never!Mind' to a stronger, complex password.

What software versions are affected by CVE-2013-7405?

CVE-2013-7405 affects GE Healthcare Centricity DMS version 4.2.

Is the password in CVE-2013-7405 hardcoded or default?

It is unclear whether the password in CVE-2013-7405 is hardcoded, default, or dependent on another system.

What are the potential impacts of CVE-2013-7405?

The potential impacts of CVE-2013-7405 include unauthorized access and potential manipulation of sensitive medical data.