CVE-2010-5308 - CVE House
Back to Database
Status published Critical CVE-2010-5308

GE Healthcare Optima MR360 does not require authentication for the...

Vulnerability Description

GE Healthcare Optima MR360 does not require authentication for the HIPAA emergency login procedure, which allows physically proximate users to gain access via an arbitrary username in the Emergency Login screen. NOTE: this might not qualify for inclusion in CVE if unauthenticated emergency access is part of the intended security policy of the product, can be controlled by the system administrator, and is not enabled by default.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-5308

Credits & Attribution

No credits recorded in the NVD database.

References

More from gehealthcare

View All →
CVE-2014-9736
GE Healthcare Centricity Clinical Archive Audit Trail Repository has a...
Critical 10
CVE-2014-7233
GE Healthcare Precision THUNIS-800+ has a default password of (1)...
Critical 10
CVE-2014-7232
GE Healthcare Discovery XR656 and XR656 G2 has a password...
Critical 10
CVE-2013-7442
GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1 has a...
Critical 10
CVE-2013-7405
The Ad Hoc Reporting feature in GE Healthcare Centricity DMS...
Critical 10

Affected Vendor

gehealthcare

View all reports →

Affected Software

optima mr360 firmware
Vulnerable Versions:
Unknown

Timeline

Official Publish: August 4th, 2015
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.