CVE-2012-6694 Hardcoded credentials in n/a
A hardcoded password for the geservice account in GE Healthcare Centricity PACS allows unauthorized access and potential privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2012-6694?
CVE-2012-6694 is a critical vulnerability in n/a, published on 4 Aug 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1, and Server 4.0, has a password of 2charGE for the geservice account, which has unspecified impact and attack vectors related to TimbuktuPro. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires it.
Weakness: CWE-255
Which versions are affected by CVE-2012-6694?
It affects 2 products.
Products include Gehealthcare Centricity Pacs Server, Gehealthcare Centricity Pacs Workstation.
How do I fix CVE-2012-6694?
No fix has been published for CVE-2012-6694 yet. Limit exposure of the affected software until one is available.
Is CVE-2012-6694 being exploited?
There is no known exploitation of CVE-2012-6694 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-fx7g-5ggh-x28c.