What’s Vulnerable › Vulnerabilities

CVE-2012-4952

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-05-01 · updated 2026-06-16
• Weakness: CWE-255

Description

Henry Schein Dentrix G5 before 15.1.294 has a single internal-database password that is shared across different customers' installations, which allows remote attackers to obtain sensitive information about patients by leveraging knowledge of this password from another installation.

Affected products

• Dentrix G5: through 15.1.293

References

• http://www.dentrix.com/support/software-updates/g5.aspx
• http://www.kb.cert.org/vuls/id/948155
• http://www.kb.cert.org/vuls/id/JALR-8ZRHUK
• http://www.dentrix.com/support/software-updates/g5.aspx
• http://www.kb.cert.org/vuls/id/948155
• http://www.kb.cert.org/vuls/id/JALR-8ZRHUK

Get alerted when CVE-2012-4952 or the next vulnerability affects your stack