CVE-2011-5324: Gehealthcare Centricity Pacs-Iw

High severity, CVSS 10.0. EPSS: 1.7% chance of exploitation in the next 30 days.

The TeraRecon server, as used in GE Healthcare Centricity PACS-IW 3.7.3.7, 3.7.3.8, and possibly other versions, has a password of (1) shared for the shared user and (2) scan for the scan user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value.

Affected products

• Gehealthcare Centricity Pacs-Iw: version 3.7.3.7 only; version 3.7.3.8 only

Published 2015-08-04. Last modified 2026-06-16.