CVE-2012-6660: GE Healthcare Precision MPi has a password of (1) orion for the serviceapp user, (2) orion for the clinical...

Security readout for executives and security teams

This CVE reports publicly documented credentials for GE Healthcare Precision MPi service, clinical operator, and administrator accounts. The record does not confirm whether they are default, hardcoded, or required by another component. Business urgency depends on whether your environment still uses this product and whether those accounts are reachable. Exposure is likely limited to organizations operating or supporting GE Healthcare Precision MPi systems. The source bundle does not identify affected versions, deployment conditions, network reachability, or whether the listed credentials apply universally. Prioritize discovery and vendor coordination. The issue could matter significantly in healthcare environments, but the public record lacks enough detail to justify emergency action without confirming affected assets and reachable access paths. Mitigation focus: Check GE Healthcare and CISA guidance for product-specific remediation.; Change or disable the accounts only if vendor-supported.; Restrict administrative and service access to trusted clinical engineering networks..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.