High 10.0HealthcarePublished Aug 4, 2015

CVE-2012-6693GE Healthcare Centricity PACS 4.0 Server has a default password of (1) nasro for the nasro (ReadOnly) user and (2) nasrw for the nasrw (Read/Write) user, which has unspecified impact and attack vecto…

Updated under an hour ago (2026-10-19 06:10 UTC)

Does this affect you?

It affects gehealthcare centricity_pacs_server. Add what you run to find out whether that includes you.

EPSS puts the chance of exploitation in the next 30 days at 1.68%, higher than 77% of scored CVEs.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for gehealthcare centricity_pacs_server

Exploited in the last 30 days

GE Healthcare Centricity PACS 4.0 Server has a default password of (1) nasro for the nasro (ReadOnly) user and (2) nasrw for the nasrw (Read/Write) user, which has unspecified impact and attack vectors.

CVSS: 10.0 HIGH (v2.0, NVD)AV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): 1.68% (percentile 77)
Assigned by: mitre
NVD analysis: Modified
Record last updated: Aug 6, 2024
First seen by InfoSec Signals: Oct 12, 2026

Affected products

Affected products

gehealthcare centricity_pacs_server gehealthcare:centricity_pacs_server	4.0	NVD

References

http://apps.gehealthcare.com/servlet/ClientServlet/C4x_SRV_SVC_2063464-001r2.pdf?REQ=RAA&DIRECTION=2063464-001&FILENAME=C4x_SRV_SVC_2063464-001r2.pdf&FILEREV=2&DOCREV_ORG=2x-refsource-confirm
http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/x-refsource-misc
https://twitter.com/digitalbond/status/619250429751222277x-refsource-misc
https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02x-refsource-misc
http://apps.gehealthcare.com/servlet/ClientServlet/C401_WS_INST_SV_2069560001r1.pdf?REQ=RAA&DIRECTION=2069560-001&FILENAME=C401_WS_INST_SV_2069560001r1.pdf&FILEREV=1&DOCREV_ORG=1x-refsource-confirm

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.