Care Everywhere Gateway version 14.3.10 contains a hard-coded credentials vulnerability in its bundled WildFly 8.2.0.Final management interface. The vulnerability allows unauthenticated remote attackers to gain administrative access using default credentials that are identical across all installations. Attackers can access the WildFly management console on port 20990 and deploy a malicious WAR file to achieve remote code execution as the Windows machine account. The affected version 14.x.x was declared end-of-life in 2017, meaning no patches will be issued for this branch. Newer versions of the product have addressed the vulnerability. The issue is particularly critical in healthcare environments where Care Everywhere Gateway is used for health information exchange. Exploitation requires network access to port 20990 but no authentication, making it relatively easy to exploit if the management interface is exposed.