What is the CVSS score of CVE-2018-10631?

CVE-2018-10631 has a CVSS 3.1 base score of 6.3 (Medium). CVSS vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.4%.

N Vision 8840 Firmware CVE-2018-10631

MEDIUM

Protection Mechanism Failure (CWE-693)

2018-07-13 ics-cert@hq.dhs.gov

Authentication Bypass N Vision 8840 Firmware N Vision 8870 Firmware

6.3

CVSS 3.1 · Vendor: hq

Severity by source

Vendor (hq) PRIMARY

6.3 MEDIUM

AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from Vendor (hq) · only source for this CVE.

CVSS VectorVendor: hq

CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Physical

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Jul 13, 2018 - 19:29 cve.org

MEDIUM 6.3

DescriptionCVE.org

The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870 Application Card and sufficient technical capability can modify the contents of this card, including the binary executables. If modified to bypass protection mechanisms, this malicious code will be run when the card is inserted into an 8840 Clinician Programmer.

AnalysisAI

The 8840 Clinician Programmer executes the application program from the 8870 Application Card. Rated medium severity (CVSS 6.3), this vulnerability is no authentication required. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-693. The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870 Application Card and sufficient technical capability can modify the contents of this card, including the binary executables. If modified to bypass protection mechanisms, this malicious code will be run when the card is inserted into an 8840 Clinician Programmer. Affected products include: Medtronic N\'Vision 8840 Firmware, Medtronic N\'Vision 8870 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.