PT-2018-10017 · Medtronic · Medtronic N'Vision Removable Application Card 8870+1
Billy Rios
+1
·
Publicado
2018-07-13
·
Atualizado
2025-08-26
·
CVE-2018-10631
CVSS v3.1
6.6
Média
| Vetor | AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Medtronic N'Vision Clinician Programmer 8840, all versions
Medtronic N'Vision removable Application Card 8870, all versions
Description
The issue concerns the execution of application programs from the 8870 Application Card by the 8840 Clinician Programmer. An attacker with physical access to an 8870 Application Card and sufficient technical capability can modify the card's contents, including binary executables. If the malicious code is designed to bypass protection mechanisms, it will be executed when the card is inserted into an 8840 Clinician Programmer.
Recommendations
For Medtronic N'Vision Clinician Programmer 8840, all versions: Restrict physical access to the 8870 Application Card to prevent modification of its contents.
For Medtronic N'Vision removable Application Card 8870, all versions: Avoid using modified or unverified Application Cards with the 8840 Clinician Programmer to minimize the risk of executing malicious code.
Correção
Missing Encryption of Sensitive Data
Protection Mechanism Failure
Improper Access Control
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Medtronic N'Vision Clinician Programmer 8840
Medtronic N'Vision Removable Application Card 8870