CVE-2011-5323: GE Healthcare Centricity PACS-IW 3.7.3.7, 3.7.3.8, and possibly other versions has a password of A11enda1e...

Security readout for executives and security teams

This CVE concerns a publicly documented password for the SQL Server sa account in GE Healthcare Centricity PACS-IW 3.7.3.7 and 3.7.3.8. The business risk is unclear because the sources do not establish whether the password is default, hardcoded, or required by another component. Exposure is most plausible where affected Centricity PACS-IW systems or their SQL Server backends remain reachable by untrusted networks or shared administrative users. The source bundle does not prove internet exposure or exact affected version scope. Treat this as a healthcare operational risk needing prompt scoping, not as a confirmed emergency. Prioritize asset identification, network containment, and vendor-supported remediation because a privileged database credential could affect clinical imaging systems if reachable. Mitigation focus: Identify any GE Healthcare Centricity PACS-IW 3.7.3.7 or 3.7.3.8 deployments.; Contact GE Healthcare for supported remediation, upgrade, or credential-handling guidance.; Restrict SQL Server and PACS administrative access to trusted management networks..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.