CVE-2018-10631: medium-severity vulnerability in Medtronic 8840 N’Vision Clinician Programmer
Medtronic N'Vision Clinician Programmer Protection Mechanism Failure
Published · Updated
Follow this CVE+ Monitor 8870 N’Vision removable Application Card+ Monitor 8840 N’Vision Clinician Programmer
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.3epss 0.4%
The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870 Application Card and sufficient technical capability can modify the contents of this card, including the binary executables. If modified to bypass protection mechanisms, this malicious code will be run when the card is inserted into an 8840 Clinician Programmer.
CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Medtronic · 8840 N’Vision Clinician ProgrammerMedtronic · 8870 N’Vision removable Application CardRelated CVEs — Medtronic 8840 N’Vision Clinician Programmer
In the same product, most dangerous first.