CVE-2014-7232

Critical

Description

GE Healthcare Discovery XR656 and XR656 G2 has a password of (1) 2getin for the insite user, (2) 4$xray for the xruser user, and (3) #superxr for the root user, which has unspecified impact and attack vectors. NOTE: it is not clear whether these passwords are default, hardcoded, or dependent on another system or product that requires a fixed value.

SeverityCritical
CVSS10.0
Exploit probability—
ProductGehealthcare Discovery
PublishedAug 4, 2015
First seenAug 4, 2015

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
gehealthcare discovery_xr656No range specified—
gehealthcare discovery_xr656_g2No range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2014-7232 · Gehealthcare Discovery · Dark Radar