HIGH🇵🇱 Wersja polska

CVE-2010-5307

CVSS 10.0v2.0pub. 2015-08-04upd. 2026-05-06

The HIPAA configuration interface in GE Healthcare Optima MR360 has a password of (1) operator for the root account, (2) adw2.0 for the admin account, and (3) adw2.0 for the sdc account, which has unspecified impact and attack vectors. NOTE: it is not clear whether these passwords are default, hardcoded, or dependent on another system or product that requires a fixed value.

CVSS Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Gehealthcare Optima Mr360 Firmware

    OS
    Gehealthcare
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2020-25175CRITICAL9.8PL ✓same product

Ujawnienie poświadczeń podczas transmisji sieciowej w urządzeniach GE Healthcare

CVE-2020-25179CRITICAL9.8PL ✓same product

Ujawnienie poświadczeń uwierzytelnienia w produktach GE Healthcare podczas transmisji sieciowej

CVE-2010-5308HIGH10.0same product

GE Healthcare Optima MR360 does not require authentication for the HIPAA emergency login procedure, which allo...

CVE-2020-6961CRITICAL10.0PL ✓same vendor

Ujawnienie klucza prywatnego SSH w produktach GE Healthcare

CVE-2020-6962CRITICAL10.0PL ✓same vendor

RCE poprzez brak walidacji danych wejściowych w GE Healthcare — systemy telemetryczne