CVE-2002-2445 Hardcoded credentials in n/a
GE Healthcare Millennium software uses hardcoded default passwords for multiple user accounts, allowing unauthorized access and potential privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Not stated
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2002-2445?
CVE-2002-2445 is a critical vulnerability in n/a, published on 4 Aug 2015.
Official description
GE Healthcare Millennium MG, NC, and MyoSIGHT has a default password of (1) root.genie for the root user, (2) "service." for the service user, (3) admin.genie for the admin user, (4) reboot for the reboot user, and (5) shutdown for the shutdown user, which has unspecified impact and attack vectors.
Which versions are affected by CVE-2002-2445?
It affects 3 products.
Products include Gehealthcare Millennium Mg, Gehealthcare Millennium Myosight, Gehealthcare Millennium Nc.
How do I fix CVE-2002-2445?
No fix has been published for CVE-2002-2445 yet. Limit exposure of the affected software until one is available.
Is CVE-2002-2445 being exploited?
There is no known exploitation of CVE-2002-2445 in the wild and no public exploit code.
Sources
Also known as GHSA-gvcw-3gfv-mg4v.