CVE-2014-7232 Hardcoded credentials in n/a
Hardcoded credentials for root and user accounts in GE Healthcare Discovery XR656 devices allow unauthorized access and potential privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Not stated
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2014-7232?
CVE-2014-7232 is a critical vulnerability in n/a, published on 4 Aug 2015.
Official description
GE Healthcare Discovery XR656 and XR656 G2 has a password of (1) 2getin for the insite user, (2) 4$xray for the xruser user, and (3) #superxr for the root user, which has unspecified impact and attack vectors. NOTE: it is not clear whether these passwords are default, hardcoded, or dependent on another system or product that requires a fixed value.
Weakness: CWE-255
Which versions are affected by CVE-2014-7232?
It affects 2 products.
Products include Gehealthcare Discovery Xr656, Gehealthcare Discovery Xr656 G2.
How do I fix CVE-2014-7232?
No fix has been published for CVE-2014-7232 yet. Limit exposure of the affected software until one is available.
Is CVE-2014-7232 being exploited?
There is no known exploitation of CVE-2014-7232 in the wild and no public exploit code.
Sources
Also known as GHSA-759f-v9fc-v9x9.