CVE-2010-5307

High

Published: 04/08/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The HIPAA configuration interface in GE Healthcare Optima MR360 has weak passwords for user accounts, which may lead to unauthorized access.

Risk Assessment

Weak passwords may allow attackers to access sensitive data, posing a serious threat to the organization's security.

Recommendation

It is recommended to change default passwords to stronger ones and conduct a security audit of the system.

Other vulnerabilities in GE Healthcare Optima MR360

CVE-2010-5308High
GE Healthcare Optima MR360 does not require authentication for the HIPAA emergency login procedure, allowing physically proximate users to gain access via an arbitrary username in the Emergency Login screen.

Original NVD description (English source)

The HIPAA configuration interface in GE Healthcare Optima MR360 has a password of (1) operator for the root account, (2) adw2.0 for the admin account, and (3) adw2.0 for the sdc account, which has unspecified impact and attack vectors. NOTE: it is not clear whether these passwords are default, hardcoded, or dependent on another system or product that requires a fixed value.