CVE-2010-5308
Last modified
CVE-2010-5308 is a vulnerability of currently unknown severity. GE Healthcare Optima MR360 does not require authentication for the HIPAA emergency login procedure, which allows physically proximate users to gain access via an arbitrary username in the Emergency Login screen. NOTE: this might not qualify for inclusion in CVE if unauthenticated emergency access is part of the intended security policy of the product, can be controlled by the system administrator, and is not enabled by default.. EPSS estimates a 1.82% chance of exploitation in the next 30 days.
Description
GE Healthcare Optima MR360 does not require authentication for the HIPAA emergency login procedure, which allows physically proximate users to gain access via an arbitrary username in the Emergency Login screen. NOTE: this might not qualify for inclusion in CVE if unauthenticated emergency access is part of the intended security policy of the product, can be controlled by the system administrator, and is not enabled by default.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Gehealthcare | Optima Mr360 Firmware | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-5308?
How severe is CVE-2010-5308?
How do I fix CVE-2010-5308?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-5302Cross-site scripting (XSS) vulnerability in timthumb.php in …
- CVE-2010-5303Cross-site scripting (XSS) vulnerability in the displayError…
- CVE-2010-5304A NULL pointer dereference flaw was found in the way LibVNCS…7.5
- CVE-2010-5305The potential exists for exposure of the product's password …
- CVE-2010-5306GE Healthcare Optima CT680, CT540, CT640, and CT520 has a de…
- CVE-2010-5307The HIPAA configuration interface in GE Healthcare Optima MR…
- CVE-2010-5309GE Healthcare CADStream Server has a default password of con…
- CVE-2010-5310The Acquisition Workstation for the GE Healthcare Revolution…
- CVE-2010-5312Cross-site scripting (XSS) vulnerability in jquery.ui.dialog…6.1
- CVE-2010-5313Race condition in arch/x86/kvm/x86.c in the Linux kernel bef…
- CVE-2010-5314Cross-site scripting (XSS) vulnerability in controllers/home…
- CVE-2010-5315Multiple cross-site request forgery (CSRF) vulnerabilities i…
Are you affected by CVE-2010-5308?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST