high7.8
CVE-2018-18630
A vulnerability was found in McKesson Cardiology product 13.x and 14.x.
Impact
A vulnerability was found in McKesson Cardiology product 13.x and 14.x. Insecure file permissions in the default installation may allow an attacker with local system access to execute unauthorized arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mckesson | Horizon Cardiology Firmware | from 12.0 through 12.2 Version 11.0 |
| Mckesson | Cardiology Firmware | Versions 13.0, 14.0 |
| Changehealthcare | Cardiology Firmware | Version 14.1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.hipaajournal.com/code-execution-vulnerability-identified-in-change-healthcare-cardiology-devices/
- https://www.us-cert.gov/ics/advisories/icsma-19-241-01
- https://www.hipaajournal.com/code-execution-vulnerability-identified-in-change-healthcare-cardiology-devices/
- https://www.us-cert.gov/ics/advisories/icsma-19-241-01