CyberSec.Space Logo
Back to CVE Browser

CVE-2013-7405

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0170%
EPSS Percentile21.54th
PublishedAug 4, 2015
Last ModifiedMay 6, 2026

Vulnerability Description

The Ad Hoc Reporting feature in GE Healthcare Centricity DMS 4.2 has a password of Never!Mind for the Administrator user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value.

Affected Platforms (CPE)

📦
Gehealthcare

Centricity Dms

= 4.2

References & Advisories

🔗 http://apps.gehealthcare.com/servlet/ClientServlet/0908141_DMS+4.2+MTG.pdf?REQ=RAA&DIRECTION=0908141&FILENAME=0908141_DMS%2B4.2%2BMTG.pdf&FILEREV=D&DOCREV_ORG=D
🔗 http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/
🔗 https://twitter.com/digitalbond/status/619250429751222277
🔗 http://apps.gehealthcare.com/servlet/ClientServlet/0908141_DMS+4.2+MTG.pdf?REQ=RAA&DIRECTION=0908141&FILENAME=0908141_DMS%2B4.2%2BMTG.pdf&FILEREV=D&DOCREV_ORG=D
🔗 http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/
🔗 https://twitter.com/digitalbond/status/619250429751222277

Related Vulnerabilities

CVE-2007-675710.0

GE Healthcare Centricity DMS 4.2, 4.1, and 4.0 has a password of Muse!Admin for the Museadmin user, which has unspecified impact a...

CVE-2026-53430

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Mes...

CVE-2026-48854

Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust...

CVE-2026-48853

Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grpc grpc all...