← Back to CVEs

CVE-2018-10631

MEDIUM

6.3

Description

The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870 Application Card and sufficient technical capability can modify the contents of this card, including the binary executables. If modified to bypass protection mechanisms, this malicious code will be run when the card is inserted into an 8840 Clinician Programmer.

CVE Details

CVSS v3.1 Score6.3

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack VectorPHYSICAL

ComplexityHIGH

Privileges RequiredNONE

User InteractionREQUIRED

Published7/13/2018

Last Modified8/26/2025

Sourcenvd

Honeypot Sightings0

Affected Products

medtronic:n\'vision_8840medtronic:n\'vision_8840_firmwaremedtronic:n\'vision_8870medtronic:n\'vision_8870_firmware

Weaknesses (CWE)

CWE-693CWE-693

References

http://www.securityfocus.com/bid/104213(ics-cert@hq.dhs.gov)

https://global.medtronic.com/xg-en/product-security/security-bulletins/nvision.html(ics-cert@hq.dhs.gov)

https://ics-cert.us-cert.gov/advisories/ICSMA-18-137-01(ics-cert@hq.dhs.gov)

https://www.medtronic.com/security(ics-cert@hq.dhs.gov)

https://ics-cert.us-cert.gov/advisories/ICSMA-18-137-01(af854a3a-2127-422b-91ae-364da2661108)

https://www.medtronic.com/security(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.