CVE-2018-10631

Medtronic N'Vision Clinician Programmer Protection Mechanism Failure

CVSS 6.3 MEDIUMEPSS 0.4%CWE-693

The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870 Application Card and sufficient technical capability can modify the contents of this card, including the binary executables. If modified to bypass protection mechanisms, this malicious code will be run when the card is inserted into an 8840 Clinician Programmer.

CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Productos afectados

Medtronic · 8840 N’Vision Clinician Programmer Medtronic · 8870 N’Vision removable Application Card

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://global.medtronic.com/xg-en/product-security/security-bulletins/nvision.html https://ics-cert.us-cert.gov/advisories/ICSMA-18-137-01 https://www.medtronic.com/security http://www.securityfocus.com/bid/104213