CWE Code: 255
Vulnerability Type: privilege_escalation
CVSS Score: 10.0
CWE Name:  Credentials Management
Summary: ge healthcare precision thunis-800+ has a default password of (1) 1973 for the factory default system utilities menu, (2) th8740 for installation using th8740_122_setup.exe, (3) hrml for "setup and activation" using dsasetup, and (4) an empty string for shutter configuration, which has unspecified impact and attack vectors.  note: since these passwords appear to be used to access functionality during installation, this issue might not cross privilege boundaries and might not be a vulnerability.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2015-08-04
Last Modified Date: 2018-03-28