← Retour aux CVEs

CVE-2018-10631

MEDIUM

6.3

Description

The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870 Application Card and sufficient technical capability can modify the contents of this card, including the binary executables. If modified to bypass protection mechanisms, this malicious code will be run when the card is inserted into an 8840 Clinician Programmer.

Details CVE

Score CVSS v3.16.3

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Vecteur d'attaquePHYSICAL

ComplexiteHIGH

Privileges requisNONE

Interaction utilisateurREQUIRED

Publie7/13/2018

Derniere modification8/26/2025

Sourcenvd

Observations honeypot0

Produits affectes

medtronic:n\'vision_8840medtronic:n\'vision_8840_firmwaremedtronic:n\'vision_8870medtronic:n\'vision_8870_firmware

Faiblesses (CWE)

CWE-693CWE-693

References

http://www.securityfocus.com/bid/104213(ics-cert@hq.dhs.gov)

https://global.medtronic.com/xg-en/product-security/security-bulletins/nvision.html(ics-cert@hq.dhs.gov)

https://ics-cert.us-cert.gov/advisories/ICSMA-18-137-01(ics-cert@hq.dhs.gov)

https://www.medtronic.com/security(ics-cert@hq.dhs.gov)

https://ics-cert.us-cert.gov/advisories/ICSMA-18-137-01(af854a3a-2127-422b-91ae-364da2661108)

https://www.medtronic.com/security(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.