CVE-2012-4952

CVE-2012-4952 describes a critical vulnerability in Henry Schein Dentrix G5 versions prior to 15.1.294, where a single, hardcoded database password is shared across all customer installations. This flaw allows unauthenticated remote attackers to access sensitive patient information by exploiting this known password. With a CVSS score of 5.0, this vulnerability is easily exploitable over a network with low complexity, potentially leading to unauthorized disclosure of confidential data. While no active exploitation, public exploit code, or significant community discussion has been observed, the inherent risk of a shared secret remains.