← Voltar para CVEs

CVE-2018-10631

MEDIUM

6.3

Descricao

The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870 Application Card and sufficient technical capability can modify the contents of this card, including the binary executables. If modified to bypass protection mechanisms, this malicious code will be run when the card is inserted into an 8840 Clinician Programmer.

Detalhes CVE

Pontuacao CVSS v3.16.3

SeveridadeMEDIUM

Vetor CVSSCVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Vetor de ataquePHYSICAL

ComplexidadeHIGH

Privilegios necessariosNONE

Interacao do usuarioREQUIRED

Publicado7/13/2018

Ultima modificacao8/26/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

medtronic:n\'vision_8840medtronic:n\'vision_8840_firmwaremedtronic:n\'vision_8870medtronic:n\'vision_8870_firmware

Fraquezas (CWE)

CWE-693CWE-693

Referencias

http://www.securityfocus.com/bid/104213(ics-cert@hq.dhs.gov)

https://global.medtronic.com/xg-en/product-security/security-bulletins/nvision.html(ics-cert@hq.dhs.gov)

https://ics-cert.us-cert.gov/advisories/ICSMA-18-137-01(ics-cert@hq.dhs.gov)

https://www.medtronic.com/security(ics-cert@hq.dhs.gov)

https://ics-cert.us-cert.gov/advisories/ICSMA-18-137-01(af854a3a-2127-422b-91ae-364da2661108)

https://www.medtronic.com/security(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.