CVE-2002-2445: GE Healthcare Millennium MG, NC, and MyoSIGHT has a default password of (1) root.genie for the root user, (...

Security readout for executives and security teams

This CVE reports factory/default passwords on GE Healthcare Millennium MG, Millennium NC, and MyoSIGHT systems. If those accounts remain unchanged on deployed systems, unauthorized users could gain access. The public record does not define impact, attack path, affected versions, or patch status, so urgency depends on whether these devices are present and reachable. Exposure is likely limited to organizations that operate the named GE Healthcare Millennium MG, Millennium NC, or MyoSIGHT systems. Risk increases if device management interfaces, service accounts, or network access paths are reachable by non-authorized users or shared clinical networks. Prioritize discovery and exposure review if these systems support patient care. The missing severity data means this should not be treated as confirmed critical, but unchanged default credentials on medical systems can create avoidable operational and safety risk. Mitigation focus: Identify whether the named GE Healthcare systems are deployed.; Check GE Healthcare guidance for supported credential and service procedures.; Change default credentials where vendor-supported and operationally safe..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.