GCVE - cpe:2.3:o:gehealthcare:optima_mr360_firmware:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:gehealthcare:optima_mr360_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

Vendor	Gehealthcare (`49dacc94-769c-5b2a-9768-4b15fd7cb9d8`)
Product	Optima Mr360 Firmware (`bd93fe3a-7291-5c50-acca-78b4ae2cbbb7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-25179`	vulnerable	2026-06-08 05:22:36.316792	Details available GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network. Published: 2020-12-14T16:12:36.000Z Updated: 2024-08-04T15:26:09.485Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsma-20-343-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-25175`	vulnerable	2026-06-08 05:22:36.122919	Details available GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network. Published: 2020-12-14T16:36:24.000Z Updated: 2024-08-04T15:26:09.534Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsma-20-343-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-5308`	vulnerable	2026-06-08 04:56:32.714040	Details available GE Healthcare Optima MR360 does not require authentication for the HIPAA emergency login procedure, which allows physically proximate users to gain access via an arbitrary username in the Emergency Login screen. NOTE: this might not qualify for inclusion in CVE if unauthenticated emergency access is part of the intended security policy of the product, can be controlled by the system administrator, and is not enabled by default. Published: 2015-08-04T10:00:00.000Z Updated: 2024-08-07T04:17:10.248Z Open on db.gcve.eu Reference links http://apps.gehealthcare.com/servlet/ClientServlet/MR360+operator+manual+paper.pdf?REQ=RAA&DIRECTION=5339461-1EN&FILENAME=MR360%2Boperator%2Bmanual%2Bpaper.pdf&FILEREV=4&DOCREV_ORG=4 http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/ https://twitter.com/digitalbond/status/619250429751222277	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-5307`	vulnerable	2026-06-08 04:56:32.713652	Details available The HIPAA configuration interface in GE Healthcare Optima MR360 has a password of (1) operator for the root account, (2) adw2.0 for the admin account, and (3) adw2.0 for the sdc account, which has unspecified impact and attack vectors. NOTE: it is not clear whether these passwords are default, hardcoded, or dependent on another system or product that requires a fixed value. Published: 2015-08-04T10:00:00.000Z Updated: 2024-08-07T04:17:10.244Z Open on db.gcve.eu Reference links http://apps.gehealthcare.com/servlet/ClientServlet/MR360+operator+manual+paper.pdf?REQ=RAA&DIRECTION=5339461-1EN&FILENAME=MR360%2Boperator%2Bmanual%2Bpaper.pdf&FILEREV=4&DOCREV_ORG=4 http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/ https://twitter.com/digitalbond/status/619250429751222277 https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.