CVE-2002-2446: GE Healthcare Millennium MG, NC, and MyoSIGHT has a password of insite.genieacq for the insite account that...

Security readout for executives and security teams

This CVE describes a fixed password for the InSite support account on GE Healthcare Millennium MG, Millennium NC, and MyoSIGHT systems. The password reportedly cannot be changed without breaking remote support functionality. Business risk depends heavily on whether these systems or their support paths are reachable by untrusted networks. Exposure is most likely in healthcare environments operating the named GE Healthcare systems, especially where remote support connectivity exists. The bundle does not define affected versions, CPEs, deployment prerequisites, or whether internet exposure is required. Treat this as an exposure-management issue for clinical technology. Priority should be driven by asset presence, network reachability, and vendor-supported mitigation options. Lack of CVSS and unspecified impact prevent a confident severity rating from the supplied evidence. Mitigation focus: Inventory GE Millennium MG, Millennium NC, and MyoSIGHT assets.; Review GE Healthcare and CISA advisory guidance for approved remediation.; Restrict network access to remote support interfaces and management paths..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.