| Package | Affected versions | Patched versions |
|---|---|---|
| centricity pacs-iw | = 3.7.3.7= 3.7.3.8 |
The TeraRecon server, as used in GE Healthcare Centricity PACS-IW 3.7.3.7, 3.7.3.8, and possibly other versions, has a password of (1) shared for the shared user and (2) scan for the scan user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free