← back
CVE-2018-18630

CVE-2018-18630

EPSS 0.3%
A vulnerability was found in McKesson Cardiology product 13.x and 14.x. Insecure file permissions in the default installation may allow an attacker with local system access to execute unauthorized arbitrary code.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://www.hipaajournal.com/code-execution-vulnerability-identified-in-change-healthcare-cardiology-devices/https://www.us-cert.gov/ics/advisories/icsma-19-241-01