Summary
Successful exploitation of this vulnerability could allow a locally authenticated user to insert specially crafted files that could result in arbitrary code execution.
Vulnerabilities 1
-
Unscored —
A vulnerability was found in McKesson Cardiology product 13.x and 14.x. Insecure file permissions in the default instal…
Revision history
-
#1
ICSMA-19-241-01 Change Healthcare McKesson and Horizon Cardiology
References
-
ICS Advisory ICSMA-19-241-01 Web Version
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-19-241-01
-
Recommended Practices
https://www.us-cert.gov/cas/tips/ST04-014.html
-
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B