CVE-2014-7232: GE Healthcare Discovery XR656 and XR656 G2 has a password of (1) 2getin for the insite user, (2) 4$xray for...

Security readout for executives and security teams

CVE-2014-7232 reports known passwords for three accounts on GE Healthcare Discovery XR656 and XR656 G2 systems, including a root account. The public record does not explain whether these are default, hardcoded, or tied to another support system. Treat affected clinical imaging assets as needing prompt verification, not assumed compromise. Exposure is limited by the source evidence to organizations operating GE Healthcare Discovery XR656 or XR656 G2 systems. Risk depends on network reachability, service access paths, account state, and whether the named credentials apply to deployed systems. Prioritize asset identification and vendor-guided remediation. The potential sensitivity is high because a root credential is named, but the public record lacks severity, exploitability, and impact details, so decisions should be evidence-led. Mitigation focus: Identify any Discovery XR656 or XR656 G2 assets in clinical environments.; Check current GE Healthcare guidance before changing vendor-managed accounts.; Restrict administrative and service interfaces to authorized support networks..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.