CVE-2018-18564
Last modified
CVE-2018-18564 is a vulnerability of currently unknown severity. An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000), CoaguChek Pro II before 04.03.00, and cobas h 232 before 04.00.04 (Serial number above KQ0400000 or KS0400000). Improper access control allows attackers in the adjacent network to change the instrument configuration.. EPSS estimates a 0.58% chance of exploitation in the next 30 days.
Description
An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000), CoaguChek Pro II before 04.03.00, and cobas h 232 before 04.00.04 (Serial number above KQ0400000 or KS0400000). Improper access control allows attackers in the adjacent network to change the instrument configuration.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Roche | Accu-Chek Inform Ii Firmware | < 03.06.00 |
| Roche | Accu-Chek Inform Ii Firmware | >= 04.00.00, < 04.03.00 |
| Roche | Cobas H 232 Firmware | < 04.00.04 |
| Roche | Coaguchek Pro Ii Firmware | < 04.03.00 |
References
- http://www.securityfocus.com/bid/105843Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-310-01Mitigation, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/105843Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-310-01Mitigation, Third Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-18564?
How severe is CVE-2018-18564?
How do I fix CVE-2018-18564?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-18557LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.…
- CVE-2018-18558An issue was discovered in Espressif ESP-IDF 2.x and 3.x bef…
- CVE-2018-18559In the Linux kernel through 4.19, a use-after-free can occur…8.1
- CVE-2018-18561An issue was discovered in Roche Accu-Chek Inform II Base Un…
- CVE-2018-18562An issue was discovered in Roche Accu-Chek Inform II Base Un…
- CVE-2018-18563An issue was discovered in Roche Accu-Chek Inform II Instrum…
- CVE-2018-18565An issue was discovered in Roche Accu-Chek Inform II Instrum…
- CVE-2018-18566The SIP service in Polycom VVX 500 and 601 devices 5.8.0.128…5.3
- CVE-2018-18567AudioCodes 440HD and 450HD devices 3.1.2.89 and earlier allo…
- CVE-2018-18568Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allo…5.9
- CVE-2018-18569The Dundas BI server before 5.0.1.1010 is vulnerable to a Se…
- CVE-2018-1857IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Se…4.8
Are you affected by CVE-2018-18564?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST