CVE-2010-5308: Critical severity ge healthcare optima mr360 firmware vulnerability
GE Healthcare Optima MR360 does not require authentication for the HIPAA emergency login procedure, which allows physically proximate users to gain access via an arbitrary username in the Emergency Login screen. NOTE: this might not qualify for inclusion in CVE if unauthenticated emergency access is part of the intended security policy of the product, can be controlled by the system administrator, and is not enabled by default.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-5308?
CVE-2010-5308 is considered a high severity vulnerability due to the potential for unauthorized access.
How does CVE-2010-5308 affect GE Healthcare Optima MR360?
CVE-2010-5308 allows physical proximity users to access the system without authentication through the Emergency Login screen.
What are the potential risks associated with CVE-2010-5308?
The risks include unauthorized access to sensitive patient information and the ability to manipulate system settings.
How can I mitigate CVE-2010-5308?
To mitigate CVE-2010-5308, it is recommended to physically secure access to the device and restrict physical access to authorized personnel only.
Has CVE-2010-5308 been fixed or patched?
As of now, there is no publicly available information indicating that a patch or fix exists for CVE-2010-5308.