CVE-2013-7405: The Ad Hoc Reporting feature in GE Healthcare Centricity DMS 4.2 has a password of Never!Mind for the Admin...

Security readout for executives and security teams

An administrator account tied to Ad Hoc Reporting in GE Healthcare Centricity DMS 4.2 reportedly used a known password. The public record does not define impact, attack path, or whether this was default, hardcoded, or inherited from another system. Treat it as a potential privileged-access exposure in any still-running DMS 4.2 deployment. Exposure is likely limited to organizations operating GE Healthcare Centricity DMS 4.2 with Ad Hoc Reporting enabled or installed. The provided sources do not identify affected configurations, network requirements, or whether later versions are affected. Prioritize discovery if legacy GE Healthcare Centricity DMS is still in use. Business urgency depends on deployment exposure, but potential administrator access in clinical systems warrants prompt asset validation and vendor follow-up. Mitigation focus: Inventory Centricity DMS 4.2 deployments and confirm whether Ad Hoc Reporting is present.; Check GE Healthcare guidance or support channels for fixes, configuration guidance, or upgrade paths.; Restrict access to DMS administrative and reporting interfaces to trusted management networks..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.