CVE-2018-10631

The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870 Application Card and sufficient technical capability can modify the contents of this card, including the binary executables. If modified to bypass protection mechanisms, this malicious code will be run when the card is inserted into an 8840 Clinician Programmer.

• CWE-693
• CWE-693

• http://www.securityfocus.com/bid/104213
• https://global.medtronic.com/xg-en/product-security/security-bulletins/nvision.html
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-137-01Third Party Advisory, US Government Resource
• https://www.medtronic.com/securityVendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-137-01Third Party Advisory, US Government Resource
• https://www.medtronic.com/securityVendor Advisory

Published

Jul 13, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-10624In Johnson Controls Metasys System Versions 8.0 and prior an…
• CVE-2018-10626Medtronic MyCareLink Patient Monitor’s update service does n…4.4
• CVE-2018-10627Echelon SmartServer 1 all versions, SmartServer 2 all versio…9.8
• CVE-2018-10628AVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2…
• CVE-2018-1063Context relabeling of filesystems is vulnerable to symbolic …
• CVE-2018-10630For Crestron TSW-X60 version prior to 2.001.0037.001 and MC3…
• CVE-2018-10632In Moxa NPort 5210, 5230, and 5232 versions 2.9 build 170307…
• CVE-2018-10633Universal Robots Robot Controllers Version CB 3.1, SW Versio…
• CVE-2018-10634Communications between Medtronic MiniMed MMT pumps and wirel…4.8
• CVE-2018-10635In Universal Robots Robot Controllers Version CB 3.1, SW Ver…
• CVE-2018-10636CNCSoft Version 1.00.83 and prior with ScreenEditor Version …8.8
• CVE-2018-10637A maliciously crafted project file may cause a buffer overfl…