CVE-2002-2446

{"id": "CVE-2002-2446", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": true, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-08-04T14:59:02.877", "references": [{"url": "http://apps.gehealthcare.com/servlet/ClientServlet/2338955-100.pdf?REQ=RAA&DIRECTION=2338955-100&FILENAME=2338955-100.pdf&FILEREV=1&DOCREV_ORG=1", "source": "cve@mitre.org"}, {"url": "http://apps.gehealthcare.com/servlet/ClientServlet/2354459-100.pdf?REQ=RAA&DIRECTION=2354459-100&FILENAME=2354459-100.pdf&FILEREV=4&DOCREV_ORG=4", "source": "cve@mitre.org"}, {"url": "http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/", "source": "cve@mitre.org"}, {"url": "https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02", "source": "cve@mitre.org"}, {"url": "https://twitter.com/digitalbond/status/619250429751222277", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-255"}]}], "descriptions": [{"lang": "en", "value": "GE Healthcare Millennium MG, NC, and MyoSIGHT has a password of insite.genieacq for the insite account that cannot be changed without disabling product functionality for remote InSite support, which has unspecified impact and attack vectors."}, {"lang": "es", "value": "Vulnerabilidad en GE Healthcare Millennium MG, NC y MyoSIGHT, tiene una contrase\u00f1a insite.genieacq para la cuenta de insite que no se puede cambiar sin deshabilitar la funcionalidad del producto para el soporte remoto de InSite, lo cual tiene un impacto y vectores de ataque no especificados."}], "lastModified": "2018-03-28T01:29:00.463", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:gehealthcare:millennium_mg_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DD46362C-2338-4E63-8076-8E4A9FBC551F"}, {"criteria": "cpe:2.3:o:gehealthcare:millennium_myosight_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "90FE8411-70AC-4C6B-9825-1015D04ADE27"}, {"criteria": "cpe:2.3:o:gehealthcare:millennium_nc_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C2286499-C442-4927-A070-19AD6D52314A"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}