← Zuruck zu CVEs

CVE-2018-10631

MEDIUM

6.3

Beschreibung

The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870 Application Card and sufficient technical capability can modify the contents of this card, including the binary executables. If modified to bypass protection mechanisms, this malicious code will be run when the card is inserted into an 8840 Clinician Programmer.

CVE Details

CVSS v3.1 Bewertung6.3

SchweregradMEDIUM

CVSS VektorCVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

AngriffsvektorPHYSICAL

KomplexitatHIGH

Erforderliche PrivilegienNONE

BenutzerinteraktionREQUIRED

Veroffentlicht7/13/2018

Zuletzt geandert8/26/2025

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

medtronic:n\'vision_8840medtronic:n\'vision_8840_firmwaremedtronic:n\'vision_8870medtronic:n\'vision_8870_firmware

Schwachen (CWE)

CWE-693CWE-693

Referenzen

http://www.securityfocus.com/bid/104213(ics-cert@hq.dhs.gov)

https://global.medtronic.com/xg-en/product-security/security-bulletins/nvision.html(ics-cert@hq.dhs.gov)

https://ics-cert.us-cert.gov/advisories/ICSMA-18-137-01(ics-cert@hq.dhs.gov)

https://www.medtronic.com/security(ics-cert@hq.dhs.gov)

https://ics-cert.us-cert.gov/advisories/ICSMA-18-137-01(af854a3a-2127-422b-91ae-364da2661108)

https://www.medtronic.com/security(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.