What is CVE-2018-10631?

CVE-2018-10631 is a medium-severity vulnerability in Medtronic 8840 N’vision Clinician Programmer, classified under Protection Mechanism Failure. CVSS score: 6.3/10. Published 2018-07-13.

How severe is CVE-2018-10631?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Vulnerability in Medtronic 8840 N’vision Clinician Programmer

CVE-2018-10631

The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870 Application Card and sufficient technical capability can modify the contents of this card, including the binary executables. If modified to bypass protection mechanisms, this malicious code will be run when the card is inserted into an 8840 Clinician Programmer.

EPSS: 0.004 (33.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Medtronic 8840 N’vision Clinician Programmer — versions All versions
Medtronic 8870 N’vision Removable Application Card — versions All versions
Medtronic N\'vision_8840
Medtronic N\'vision_8840_firmware
Medtronic N\'vision_8870
Medtronic N\'vision_8870_firmware

Weakness classification (CWE)

CWE-693 — Protection Mechanism Failure

References

ics-cert@hq.dhs.gov
ics-cert@hq.dhs.gov (Vendor Advisory)
ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory)
ics-cert@hq.dhs.gov

Frequently asked questions

What is CVE-2018-10631?: CVE-2018-10631 is a medium-severity vulnerability in Medtronic 8840 N’vision Clinician Programmer, classified under Protection Mechanism Failure. CVSS score: 6.3/10. Published 2018-07-13.
How severe is CVE-2018-10631?: Medium severity. CVSS v3 base score is 6.3 out of 10.