ICSMA-18-310-01

icsaUScisa_csaf_ot

Roche Diagnostics Point of Care Handheld Medical Devices (Update A)

view advisory published 2018-11-06

Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to modify system settings or execute arbitrary code.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2018-18565USmedium6.8—
An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000), CoaguChek Pro II b…
CVE-2018-18564UShigh7.4—
An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000), CoaguChek Pro II b…
CVE-2018-18563UScritical9.6—
An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000), CoaguChek Pro II b…
CVE-2018-18562UShigh8.8—
An issue was discovered in Roche Accu-Chek Inform II Base Unit / Base Unit Hub before 03.01.04 and CoaguChek / cobas h232 Handheld Base Unit before 03.01.04. Weak access credential…
CVE-2018-18561UShigh8.0—
An issue was discovered in Roche Accu-Chek Inform II Base Unit / Base Unit Hub before 03.01.04 and CoaguChek / cobas h232 Handheld Base Unit before 03.01.04. Insecure permissions i…
02

references

External citations — patches, advisories, analysis.

03

remediations (5)

  • FixedPoint of Care handheld medical devices

    For all affected products, Roche Diagnostic has scheduled release of new software updates with availability beginning November 2018.

  • FixedPoint of Care handheld medical devices

    For all affected products, Roche Diagnostic has scheduled release of new software updates with availability beginning November 2018.

  • FixedPoint of Care handheld medical devices

    For all affected products, Roche Diagnostic has scheduled release of new software updates with availability beginning November 2018.

  • FixedPoint of Care handheld medical devices

    For all affected products, Roche Diagnostic has scheduled release of new software updates with availability beginning November 2018.

  • FixedPoint of Care handheld medical devices

    For all affected products, Roche Diagnostic has scheduled release of new software updates with availability beginning November 2018.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan