Optima Mr360 Firmware

optima_mr360_firmware

Vendor: Gehealthcare • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-25179 1Gehealthcare 1111.5t Brivo Mr355 Firmware 3.0t Signa Hd 16 Firmware3.0t Signa Hd 23 Firmware+108 more Nov 21, 2024 Dec 14, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.
CVE-2020-25175 1Gehealthcare 1111.5t Brivo Mr355 Firmware 3.0t Signa Hd 16 Firmware3.0t Signa Hd 23 Firmware+108 more Nov 21, 2024 Dec 14, 2020 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.
CVE-2010-5308 1Gehealthcare 1Optima Mr360 Firmware May 6, 2026 Aug 4, 2015 N/A· v4 N/A· v3 10.0 HIGH· v2 GE Healthcare Optima MR360 does not require authentication for the HIPAA emergency login procedure, which allows physically proximate users to gain access via an arbitrary username in the Emergency Login screen. NOTE: t...Show more GE Healthcare Optima MR360 does not require authentication for the HIPAA emergency login procedure, which allows physically proximate users to gain access via an arbitrary username in the Emergency Login screen. NOTE: this might not qualify for inclusion in CVE if unauthenticated emergency access is part of the intended security policy of the product, can be controlled by the system administrator, and is not enabled by default.Show less
CVE-2010-5307 1Gehealthcare 1Optima Mr360 Firmware May 6, 2026 Aug 4, 2015 N/A· v4 N/A· v3 10.0 HIGH· v2 The HIPAA configuration interface in GE Healthcare Optima MR360 has a password of (1) operator for the root account, (2) adw2.0 for the admin account, and (3) adw2.0 for the sdc account, which has unspecified impact and...Show more The HIPAA configuration interface in GE Healthcare Optima MR360 has a password of (1) operator for the root account, (2) adw2.0 for the admin account, and (3) adw2.0 for the sdc account, which has unspecified impact and attack vectors. NOTE: it is not clear whether these passwords are default, hardcoded, or dependent on another system or product that requires a fixed value.Show less