← Volver a CVEs

CVE-2018-10631

MEDIUM

6.3

Descripcion

The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870 Application Card and sufficient technical capability can modify the contents of this card, including the binary executables. If modified to bypass protection mechanisms, this malicious code will be run when the card is inserted into an 8840 Clinician Programmer.

Detalles CVE

Puntuacion CVSS v3.16.3

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Vector de ataquePHYSICAL

ComplejidadHIGH

Privilegios requeridosNONE

Interaccion usuarioREQUIRED

Publicado7/13/2018

Ultima modificacion8/26/2025

Fuentenvd

Avistamientos honeypot0

Productos afectados

medtronic:n\'vision_8840medtronic:n\'vision_8840_firmwaremedtronic:n\'vision_8870medtronic:n\'vision_8870_firmware

Debilidades (CWE)

CWE-693CWE-693

Referencias

http://www.securityfocus.com/bid/104213(ics-cert@hq.dhs.gov)

https://global.medtronic.com/xg-en/product-security/security-bulletins/nvision.html(ics-cert@hq.dhs.gov)

https://ics-cert.us-cert.gov/advisories/ICSMA-18-137-01(ics-cert@hq.dhs.gov)

https://www.medtronic.com/security(ics-cert@hq.dhs.gov)

https://ics-cert.us-cert.gov/advisories/ICSMA-18-137-01(af854a3a-2127-422b-91ae-364da2661108)

https://www.medtronic.com/security(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.