GE puts default password in radiology devices,leaves healthcare networks exposed

About 6 years ago when i worked for a local hospital in IT they got a new GE CT scanner. I got to help them with the usual network runs and whatever.

Everything was as default as they could leave it. The techs were told not to change anything unless absolutely necessary. I asked about passwords and they just smiled and shook their head.

A quick google search later and i got in via ssh as root.... i did let the GE support know that “our network scanner bruteforced its way into the scanner” but they didn’t care. They “made a ticket.” Before i left a few years later i was still able to ssh in.

i have done about 30 MRIs and I always feared something bad will happen while I'm in there.