CVE-2011-5324: The TeraRecon server, as used in GE Healthcare Centricity PACS-IW 3.7.3.7, 3.7.3.8, and possibly other vers...

Security readout for executives and security teams

This CVE describes fixed or shared credentials associated with the TeraRecon server used in GE Healthcare Centricity PACS-IW 3.7.3.7 and 3.7.3.8. The public record does not clarify whether they are default, hardcoded, or required by another system. Treat exposed or unsupported medical imaging deployments as a priority for verification. Exposure is most likely in healthcare environments running GE Healthcare Centricity PACS-IW 3.7.3.7 or 3.7.3.8 with the bundled TeraRecon server. The CVE says other versions may be affected, but the source bundle does not confirm them. Prioritize asset verification and vendor guidance because medical imaging systems can be operationally sensitive, but the public evidence is incomplete. Escalate if affected versions are internet-reachable, broadly reachable internally, or unsupported. Mitigation focus: Inventory Centricity PACS-IW 3.7.3.7 and 3.7.3.8 deployments.; Check GE Healthcare or product support guidance for remediation.; Restrict access to PACS and TeraRecon server interfaces to trusted clinical networks..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.