High ICSMA-18-310-01 5 CVEs

Roche Diagnostics Point of Care Handheld Medical Devices (Update A)

Published Nov 6, 2018 · Updated Nov 8, 2018 · Revision 2

Vendor: Roche Diagnostics Product: Point of Care handheld medical devices

Summary

Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to modify system settings or execute arbitrary code.

Vulnerabilities 5

Unscored —

CVE-2018-18561

An issue was discovered in Roche Accu-Chek Inform II Base Unit / Base Unit Hub before 03.01.04 and CoaguChek / cobas h2…

Nov 20, 2018
Unscored —

CVE-2018-18562

An issue was discovered in Roche Accu-Chek Inform II Base Unit / Base Unit Hub before 03.01.04 and CoaguChek / cobas h2…

Nov 20, 2018
Unscored —

CVE-2018-18563

An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x be…

Nov 20, 2018
Unscored —

CVE-2018-18564

An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x be…

Nov 20, 2018
Unscored —

CVE-2018-18565

An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x be…

Nov 20, 2018

Revision history

2018-11-08 #2
ICSMA-18-310-01 Roche Diagnostics Point of Care Handheld Medical Devices (Update A)
2018-11-06 #1
ICSMA-18-310-01 Roche Point of Care Handheld Medical Devices

References

ICS Advisory ICSMA-18-310-01 Web Version
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-310-01
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B