CVE-2009-5143: GE Healthcare Discovery 530C has a password of #bigguy1 for the (1) acqservice user and (2) wsservice user...

Security readout for executives and security teams

This CVE reports that a GE Healthcare Discovery 530C Xeleris System used service accounts with a known password. The impact and attack path are not specified, and the record notes uncertainty about whether the password is default, hardcoded, or product-dependent. Exposure is most likely in healthcare environments operating GE Healthcare Discovery 530C with the referenced Xeleris System accounts. Risk depends on whether those accounts exist, whether the password applies, and whether relevant management or service access is reachable. Treat this as a medical-device exposure that needs asset confirmation and vendor-guided handling. Prioritize if affected systems are network-reachable beyond trusted clinical segments, but do not assume active exploitation from the supplied evidence. Mitigation focus: Identify whether Discovery 530C and Xeleris System are present.; Review GE Healthcare and ICS-CERT guidance for supported remediation.; Confirm with GE before changing service account credentials..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.