CVE-2018-10631

Medium

Description

The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870 Application Card and sufficient technical capability can modify the contents of this card, including the binary executables. If modified to bypass protection mechanisms, this malicious code will be run when the card is inserted into an 8840 Clinician Programmer.

SeverityMedium
CVSS6.3
Exploit probability—
ProductMedtronic N\'vision 8840 Firmware
PublishedJul 13, 2018
First seenJul 13, 2018
Weakness typeCWE-693CWE-693

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
medtronic n\'vision_8840_firmwareNo range specified—
medtronic n\'vision_8870_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2018-10631 · Medtronic N\'vision 8840 Firmware · Dark Radar