What’s Vulnerable › Vulnerabilities

CVE-2011-5322

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-08-04 · updated 2026-06-16
• Weakness: CWE-255

Description

GE Healthcare Centricity Analytics Server 1.1 has a default password of (1) V0yag3r for the SQL Server sa user, (2) G3car3s for the analyst user, (3) G3car3s for the ccg user, (4) V0yag3r for the viewer user, and (5) geservice for the geservice user in the Webmin interface, which has unspecified impact and attack vectors.

Affected products

• Gehealthcare Centricity Analytics Server: 1.1

References

• http://apps.gehealthcare.com/servlet/ClientServlet/CA11_IN_2059103-001r4.pdf?REQ=RAA&DIRECTION=2059103-001&FILENAME=CA11_IN_2059103-001r4.pdf&FILEREV=4&DOCREV_ORG=4
• http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02
• https://twitter.com/digitalbond/status/619250429751222277
• http://apps.gehealthcare.com/servlet/ClientServlet/CA11_IN_2059103-001r4.pdf?REQ=RAA&DIRECTION=2059103-001&FILENAME=CA11_IN_2059103-001r4.pdf&FILEREV=4&DOCREV_ORG=4
• http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02
• https://twitter.com/digitalbond/status/619250429751222277

Get alerted when CVE-2011-5322 or the next vulnerability affects your stack