GE Infinia/Infinia with Hawkeye 4 medical imaging systems all current versions are affected these devices use default or hard-coded credentials. Successful exploitation of this vulnerability may allow a remote attacker to bypass authentication and gain access to the affected devices.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
The product contains hard-coded credentials, such as a password or cryptographic key.
| Link | Tags |
|---|---|
| http://www.securityfocus.com/bid/103405 | third party advisory vdb entry |
| https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02 | mitigation third party advisory us government resource |