CVE-2009-5143

GE Healthcare Discovery 530C has a password of #bigguy1 for the (1) acqservice user and (2) wsservice user of the Xeleris System, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2015-08-04

Last modified

2024-08-07

Weaknesses

CWE-255

Affected products

• Discovery 530c Firmware (Gehealthcare)

References

• http://apps.gehealthcare.com/servlet/ClientServlet/5323167-1EN_r2.pdf?REQ=RAA&DIRECTION=5323167-1EN&FILENAME=5323167-1E…
• http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02
• https://twitter.com/digitalbond/status/619250429751222277