Vulnerabilities > CVE-2010-5308 - Credentials Management vulnerability in Gehealthcare Optima Mr360 Firmware

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
gehealthcare
CWE-255
critical
NVD
Published: 2015-08-04
Updated: 2015-08-05

Summary

GE Healthcare Optima MR360 does not require authentication for the HIPAA emergency login procedure, which allows physically proximate users to gain access via an arbitrary username in the Emergency Login screen. NOTE: this might not qualify for inclusion in CVE if unauthenticated emergency access is part of the intended security policy of the product, can be controlled by the system administrator, and is not enabled by default.

Vulnerable Configurations

Part Description Count
OS
Gehealthcare
1

Common Weakness Enumeration (CWE)

References