CVE-2018-10631CWE-693

Medtronic N'Vision Clinician Programmer Protection Mechanism Failure

Medium · published July 13, 2018

CVSS v3.1
6.3
EPSS
0%
Percentile
34.2
In the wild
Unconfirmed
What it is

The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870 Application Card and sufficient technical capability can modify the contents of this card, including the binary executables. If modified to bypass protection mechanisms, this malicious code will be run when the card is inserted into an 8840 Clinician Programmer.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00411 · 34.2th percentile
Weakness
CWE-693 · Protection Mechanism Failure
Published
2018-07-13T19:00Z
EPSS history
Timeline
  • 13 JUL 19:00Z
    Medtronic N'Vision Clinician Programmer Protection Mechanism Failure
    cvelistv5