CVE-2018-18565

An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000), CoaguChek Pro II before 04.03.00, CoaguChek XS Plus before 03.01.06, CoaguChek XS Pro before 03.01.06, cobas h 232 before 03.01.03 (Serial number below KQ0400000 or KS0400000), and cobas h 232 before 04.00.04 (Serial number above KQ0400000 or KS0400000). A vulnerability in the software update mechanism allows authenticated attackers in the adjacent network to overwrite arbitrary files on the system through a crafted update package.

• CWE-434

• http://www.securityfocus.com/bid/105843Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-310-01Mitigation, Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/105843Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-310-01Mitigation, Third Party Advisory, US Government Resource

Published

Nov 20, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-18558An issue was discovered in Espressif ESP-IDF 2.x and 3.x bef…
• CVE-2018-18559In the Linux kernel through 4.19, a use-after-free can occur…8.1
• CVE-2018-18561An issue was discovered in Roche Accu-Chek Inform II Base Un…
• CVE-2018-18562An issue was discovered in Roche Accu-Chek Inform II Base Un…
• CVE-2018-18563An issue was discovered in Roche Accu-Chek Inform II Instrum…
• CVE-2018-18564An issue was discovered in Roche Accu-Chek Inform II Instrum…
• CVE-2018-18566The SIP service in Polycom VVX 500 and 601 devices 5.8.0.128…5.3
• CVE-2018-18567AudioCodes 440HD and 450HD devices 3.1.2.89 and earlier allo…
• CVE-2018-18568Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allo…5.9
• CVE-2018-18569The Dundas BI server before 5.0.1.1010 is vulnerable to a Se…
• CVE-2018-1857IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Se…4.8
• CVE-2018-18570Planon before Live Build 41 has XSS.