{"api_version":"1","generated_at":"2026-07-23T01:52:24+00:00","cve":"CVE-2011-5322","urls":{"html":"https://cve.report/CVE-2011-5322","api":"https://cve.report/api/cve/CVE-2011-5322.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-5322","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-5322"},"summary":{"title":"CVE-2011-5322","description":"GE Healthcare Centricity Analytics Server 1.1 has a default password of (1) V0yag3r for the SQL Server sa user, (2) G3car3s for the analyst user, (3) G3car3s for the ccg user, (4) V0yag3r for the viewer user, and (5) geservice for the geservice user in the Webmin interface, which has unspecified impact and attack vectors.","state":"PUBLISHED","assigner":"mitre","published_at":"2015-08-04 14:59:14","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-255","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"10","severity":"","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://apps.gehealthcare.com/servlet/ClientServlet/CA11_IN_2059103-001r4.pdf?REQ=RAA&DIRECTION=2059103-001&FILENAME=CA11_IN_2059103-001r4.pdf&FILEREV=4&DOCREV_ORG=4","name":"http://apps.gehealthcare.com/servlet/ClientServlet/CA11_IN_2059103-001r4.pdf?REQ=RAA&DIRECTION=2059103-001&FILENAME=CA11_IN_2059103-001r4.pdf&FILEREV=4&DOCREV_ORG=4","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Marketplace-US Marketplace Home | GE Healthcare","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/","name":"http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Vulnerable Breasts And Brains? Cancer Scan Tech Has Terrible Password Security","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://twitter.com/digitalbond/status/619250429751222277","name":"https://twitter.com/digitalbond/status/619250429751222277","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Dale Peterson on Twitter: \"Funny slide with GE default password word cloud. Go bigguy! #Shakacon http://t.co/t1dcIziQza\"","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02","name":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"GE Medical Devices Vulnerability | ICS-CERT","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-5322","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-5322","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"5322","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gehealthcare","cpe5":"centricity_analytics_server","cpe6":"1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T00:30:46.961Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://apps.gehealthcare.com/servlet/ClientServlet/CA11_IN_2059103-001r4.pdf?REQ=RAA&DIRECTION=2059103-001&FILENAME=CA11_IN_2059103-001r4.pdf&FILEREV=4&DOCREV_ORG=4"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://twitter.com/digitalbond/status/619250429751222277"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2011-10-18T00:00:00.000Z","descriptions":[{"lang":"en","value":"GE Healthcare Centricity Analytics Server 1.1 has a default password of (1) V0yag3r for the SQL Server sa user, (2) G3car3s for the analyst user, (3) G3car3s for the ccg user, (4) V0yag3r for the viewer user, and (5) geservice for the geservice user in the Webmin interface, which has unspecified impact and attack vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-03-27T16:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://apps.gehealthcare.com/servlet/ClientServlet/CA11_IN_2059103-001r4.pdf?REQ=RAA&DIRECTION=2059103-001&FILENAME=CA11_IN_2059103-001r4.pdf&FILEREV=4&DOCREV_ORG=4"},{"tags":["x_refsource_MISC"],"url":"http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/"},{"tags":["x_refsource_MISC"],"url":"https://twitter.com/digitalbond/status/619250429751222277"},{"tags":["x_refsource_MISC"],"url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2011-5322","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"GE Healthcare Centricity Analytics Server 1.1 has a default password of (1) V0yag3r for the SQL Server sa user, (2) G3car3s for the analyst user, (3) G3car3s for the ccg user, (4) V0yag3r for the viewer user, and (5) geservice for the geservice user in the Webmin interface, which has unspecified impact and attack vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://apps.gehealthcare.com/servlet/ClientServlet/CA11_IN_2059103-001r4.pdf?REQ=RAA&DIRECTION=2059103-001&FILENAME=CA11_IN_2059103-001r4.pdf&FILEREV=4&DOCREV_ORG=4","refsource":"CONFIRM","url":"http://apps.gehealthcare.com/servlet/ClientServlet/CA11_IN_2059103-001r4.pdf?REQ=RAA&DIRECTION=2059103-001&FILENAME=CA11_IN_2059103-001r4.pdf&FILEREV=4&DOCREV_ORG=4"},{"name":"http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/","refsource":"MISC","url":"http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/"},{"name":"https://twitter.com/digitalbond/status/619250429751222277","refsource":"MISC","url":"https://twitter.com/digitalbond/status/619250429751222277"},{"name":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02","refsource":"MISC","url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2011-5322","datePublished":"2015-08-04T10:00:00.000Z","dateReserved":"2015-07-05T00:00:00.000Z","dateUpdated":"2024-08-07T00:30:46.961Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2015-08-04 14:59:14","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-255","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":10,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gehealthcare:centricity_analytics_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A7D7163C-9984-4115-B200-2BA293287633"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"5322","Ordinal":"1","Title":"CVE-2011-5322","CVE":"CVE-2011-5322","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"5322","Ordinal":"1","NoteData":"GE Healthcare Centricity Analytics Server 1.1 has a default password of (1) V0yag3r for the SQL Server sa user, (2) G3car3s for the analyst user, (3) G3car3s for the ccg user, (4) V0yag3r for the viewer user, and (5) geservice for the geservice user in the Webmin interface, which has unspecified impact and attack vectors.","Type":"Description","Title":"CVE-2011-5322"},{"CveYear":"2011","CveId":"5322","Ordinal":"2","NoteData":"2015-08-04","Type":"Other","Title":"Published"},{"CveYear":"2011","CveId":"5322","Ordinal":"3","NoteData":"2018-03-27","Type":"Other","Title":"Modified"}]}}}