VAR-201811-0060
Vulnerability from variot - Updated: 2023-12-18 12:43An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000), CoaguChek Pro II before 04.03.00, CoaguChek XS Plus before 03.01.06, CoaguChek XS Pro before 03.01.06, cobas h 232 before 03.01.03 (Serial Number below KQ0400000 or KS0400000) and cobas h 232 before 04.00.04 (Serial Number above KQ0400000 or KS0400000). Improper access control to a service command allows attackers in the adjacent network to execute arbitrary code on the system through a crafted Poct1-A message. plural Roche The product contains an access control vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. RocheAccu-ChekInformIIInstrument and others are hand-held blood test medical devices from Roche, Switzerland. There are device permission and access control vulnerabilities in the software update mechanism of several Roche devices. The vulnerability stems from the failure of the program to perform proper access control. The attacker can use the special update package to write the file to any file. Multiple Roche Point of Care Handheld Medical Services are prone to the following security vulnerabilities: 1. An authentication bypass vulnerability 2. An OS command-injection vulnerability 3. An arbitrary file-upload vulnerability 4. A remote code-execution vulnerability 5. An access bypass vulnerability An attacker can exploit these issues to bypass authentication mechanism, execute arbitrary commands and codes, upload arbitrary files, or to bypass security restrictions
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201811-0060",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "coaguchek pro ii",
"scope": "lt",
"trust": 1.6,
"vendor": "roche",
"version": "04.03.00"
},
{
"model": "coaguchek xs plus",
"scope": "lt",
"trust": 1.6,
"vendor": "roche",
"version": "03.01.06"
},
{
"model": "cobas h 232",
"scope": "lt",
"trust": 1.0,
"vendor": "roche",
"version": "04.00.04"
},
{
"model": "cobas h 232",
"scope": "lt",
"trust": 1.0,
"vendor": "roche",
"version": "03.01.03"
},
{
"model": "cobas h 232",
"scope": "gte",
"trust": 1.0,
"vendor": "roche",
"version": "04.00.00"
},
{
"model": "accu-chek inform ii",
"scope": "lt",
"trust": 1.0,
"vendor": "roche",
"version": "03.06.00"
},
{
"model": "accu-chek inform ii",
"scope": "lt",
"trust": 1.0,
"vendor": "roche",
"version": "04.03.00"
},
{
"model": "accu-chek inform ii",
"scope": "gte",
"trust": 1.0,
"vendor": "roche",
"version": "04.00.00"
},
{
"model": "coaguchek xs pro",
"scope": "lt",
"trust": 1.0,
"vendor": "roche",
"version": "03.01.06"
},
{
"model": "accu-chek inform ii",
"scope": "eq",
"trust": 0.8,
"vendor": "roche diagnostics",
"version": "04.03.00"
},
{
"model": "accu-chek inform ii",
"scope": "lt",
"trust": 0.8,
"vendor": "roche diagnostics",
"version": "of 04.x"
},
{
"model": "accu-chek inform ii instrument",
"scope": "lt",
"trust": 0.6,
"vendor": "roche",
"version": "03.06.00"
},
{
"model": "coaguchek xs pro",
"scope": null,
"trust": 0.6,
"vendor": "roche",
"version": null
},
{
"model": "cobas h",
"scope": "eq",
"trust": 0.6,
"vendor": "roche",
"version": "232\u003c03.01.03"
},
{
"model": "cobas h",
"scope": "eq",
"trust": 0.6,
"vendor": "roche",
"version": "232\u003c04.00.04"
},
{
"model": null,
"scope": "eq",
"trust": 0.4,
"vendor": "accu chek inform ii",
"version": "*"
},
{
"model": null,
"scope": "eq",
"trust": 0.4,
"vendor": "cobas h 232",
"version": "*"
},
{
"model": "cobas h",
"scope": "eq",
"trust": 0.3,
"vendor": "roche",
"version": "2320"
},
{
"model": "coaguchek xs pro",
"scope": "eq",
"trust": 0.3,
"vendor": "roche",
"version": "0"
},
{
"model": "coaguchek xs plus",
"scope": "eq",
"trust": 0.3,
"vendor": "roche",
"version": "0"
},
{
"model": "coaguchek pro ii",
"scope": "eq",
"trust": 0.3,
"vendor": "roche",
"version": "0"
},
{
"model": "coaguchek",
"scope": "eq",
"trust": 0.3,
"vendor": "roche",
"version": "0"
},
{
"model": "accu-chek inform ii instrument",
"scope": "eq",
"trust": 0.3,
"vendor": "roche",
"version": "0"
},
{
"model": "cobas h",
"scope": "ne",
"trust": 0.3,
"vendor": "roche",
"version": "2324.0.4"
},
{
"model": "cobas h",
"scope": "ne",
"trust": 0.3,
"vendor": "roche",
"version": "2323.1.4"
},
{
"model": "cobas h",
"scope": "ne",
"trust": 0.3,
"vendor": "roche",
"version": "2323.1.3"
},
{
"model": "coaguchek xs pro",
"scope": "ne",
"trust": 0.3,
"vendor": "roche",
"version": "3.1.6"
},
{
"model": "coaguchek xs plus",
"scope": "ne",
"trust": 0.3,
"vendor": "roche",
"version": "3.1.6"
},
{
"model": "coaguchek pro ii",
"scope": "ne",
"trust": 0.3,
"vendor": "roche",
"version": "4.3"
},
{
"model": "coaguchek",
"scope": "ne",
"trust": 0.3,
"vendor": "roche",
"version": "3.1.4"
},
{
"model": "accu-chek inform ii instrument",
"scope": "ne",
"trust": 0.3,
"vendor": "roche",
"version": "3.6"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "coaguchek pro ii",
"version": "*"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "coaguchek xs plus",
"version": "*"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "coaguchek xs pro",
"version": "*"
}
],
"sources": [
{
"db": "IVD",
"id": "7d81238f-463f-11e9-8b84-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-25434"
},
{
"db": "BID",
"id": "105843"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-012880"
},
{
"db": "NVD",
"id": "CVE-2018-18563"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:roche:accu-chek_inform_ii_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "04.03.00",
"versionStartIncluding": "04.00.00",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:roche:accu-chek_inform_ii_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "03.06.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:roche:accu-chek_inform_ii:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:roche:cobas_h_232_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "03.01.03",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:roche:cobas_h_232_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "04.00.04",
"versionStartIncluding": "04.00.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:roche:cobas_h_232:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:roche:coaguchek_pro_ii_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "04.03.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:roche:coaguchek_pro_ii:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:roche:coaguchek_xs_plus_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "03.01.06",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:roche:coaguchek_xs_plus:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:roche:coaguchek_xs_pro_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "03.01.06",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:roche:coaguchek_xs_pro:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2018-18563"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Niv Yehezkel of Medigate",
"sources": [
{
"db": "BID",
"id": "105843"
}
],
"trust": 0.3
},
"cve": "CVE-2018-18563",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "LOW",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "COMPLETE",
"baseScore": 8.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 6.5,
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:A/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Adjacent Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Complete",
"baseScore": 8.3,
"confidentialityImpact": "Complete",
"exploitabilityScore": null,
"id": "CVE-2018-18563",
"impactScore": null,
"integrityImpact": "Complete",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:A/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 5.9,
"confidentialityImpact": "NONE",
"exploitabilityScore": 2.5,
"id": "CNVD-2018-25434",
"impactScore": 9.2,
"integrityImpact": "COMPLETE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:A/AC:H/Au:S/C:N/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"author": "IVD",
"availabilityImpact": "COMPLETE",
"baseScore": 5.9,
"confidentialityImpact": "NONE",
"exploitabilityScore": 2.5,
"id": "7d81238f-463f-11e9-8b84-000c29342cb1",
"impactScore": 9.2,
"integrityImpact": "COMPLETE",
"severity": "MEDIUM",
"trust": 0.2,
"vectorString": "AV:A/AC:H/Au:S/C:N/I:C/A:C",
"version": "2.9 [IVD]"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"author": "NVD",
"availabilityImpact": "HIGH",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 2.8,
"impactScore": 6.0,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
{
"attackComplexity": "Low",
"attackVector": "Adjacent Network",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 9.6,
"baseSeverity": "Critical",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2018-18563",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Changed",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "NVD",
"id": "CVE-2018-18563",
"trust": 1.8,
"value": "CRITICAL"
},
{
"author": "CNVD",
"id": "CNVD-2018-25434",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201811-116",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "IVD",
"id": "7d81238f-463f-11e9-8b84-000c29342cb1",
"trust": 0.2,
"value": "CRITICAL"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "7d81238f-463f-11e9-8b84-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-25434"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-012880"
},
{
"db": "NVD",
"id": "CVE-2018-18563"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-116"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000), CoaguChek Pro II before 04.03.00, CoaguChek XS Plus before 03.01.06, CoaguChek XS Pro before 03.01.06, cobas h 232 before 03.01.03 (Serial Number below KQ0400000 or KS0400000) and cobas h 232 before 04.00.04 (Serial Number above KQ0400000 or KS0400000). Improper access control to a service command allows attackers in the adjacent network to execute arbitrary code on the system through a crafted Poct1-A message. plural Roche The product contains an access control vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. RocheAccu-ChekInformIIInstrument and others are hand-held blood test medical devices from Roche, Switzerland. There are device permission and access control vulnerabilities in the software update mechanism of several Roche devices. The vulnerability stems from the failure of the program to perform proper access control. The attacker can use the special update package to write the file to any file. Multiple Roche Point of Care Handheld Medical Services are prone to the following security vulnerabilities:\n1. An authentication bypass vulnerability\n2. An OS command-injection vulnerability\n3. An arbitrary file-upload vulnerability\n4. A remote code-execution vulnerability\n5. An access bypass vulnerability\nAn attacker can exploit these issues to bypass authentication mechanism, execute arbitrary commands and codes, upload arbitrary files, or to bypass security restrictions",
"sources": [
{
"db": "NVD",
"id": "CVE-2018-18563"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-012880"
},
{
"db": "CNVD",
"id": "CNVD-2018-25434"
},
{
"db": "BID",
"id": "105843"
},
{
"db": "IVD",
"id": "7d81238f-463f-11e9-8b84-000c29342cb1"
}
],
"trust": 2.61
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2018-18563",
"trust": 3.5
},
{
"db": "ICS CERT",
"id": "ICSMA-18-310-01",
"trust": 3.3
},
{
"db": "BID",
"id": "105843",
"trust": 1.9
},
{
"db": "CNVD",
"id": "CNVD-2018-25434",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201811-116",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2018-012880",
"trust": 0.8
},
{
"db": "IVD",
"id": "7D81238F-463F-11E9-8B84-000C29342CB1",
"trust": 0.2
}
],
"sources": [
{
"db": "IVD",
"id": "7d81238f-463f-11e9-8b84-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-25434"
},
{
"db": "BID",
"id": "105843"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-012880"
},
{
"db": "NVD",
"id": "CVE-2018-18563"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-116"
}
]
},
"id": "VAR-201811-0060",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "7d81238f-463f-11e9-8b84-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-25434"
}
],
"trust": 1.542857146
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS",
"Network device"
],
"sub_category": null,
"trust": 0.6
},
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.2
}
],
"sources": [
{
"db": "IVD",
"id": "7d81238f-463f-11e9-8b84-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-25434"
}
]
},
"last_update_date": "2023-12-18T12:43:45.989000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "https://diagnostics.roche.com/us/en/home.html"
},
{
"title": "Patches for multiple Roche device permissions and access control vulnerabilities",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchinfo/show/147339"
},
{
"title": "Multiple Roche Repair measures for device security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=100318"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-25434"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-012880"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-116"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-434",
"trust": 1.0
},
{
"problemtype": "CWE-284",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-012880"
},
{
"db": "NVD",
"id": "CVE-2018-18563"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.3,
"url": "https://ics-cert.us-cert.gov/advisories/icsma-18-310-01"
},
{
"trust": 1.6,
"url": "http://www.securityfocus.com/bid/105843"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-18563"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-18563"
},
{
"trust": 0.3,
"url": "https://www.roche.com/"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-25434"
},
{
"db": "BID",
"id": "105843"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-012880"
},
{
"db": "NVD",
"id": "CVE-2018-18563"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-116"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "7d81238f-463f-11e9-8b84-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-25434"
},
{
"db": "BID",
"id": "105843"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-012880"
},
{
"db": "NVD",
"id": "CVE-2018-18563"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-116"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-12-14T00:00:00",
"db": "IVD",
"id": "7d81238f-463f-11e9-8b84-000c29342cb1"
},
{
"date": "2018-12-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-25434"
},
{
"date": "2018-11-06T00:00:00",
"db": "BID",
"id": "105843"
},
{
"date": "2019-02-08T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-012880"
},
{
"date": "2018-11-20T19:29:00.853000",
"db": "NVD",
"id": "CVE-2018-18563"
},
{
"date": "2018-11-07T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201811-116"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-12-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-25434"
},
{
"date": "2018-11-06T00:00:00",
"db": "BID",
"id": "105843"
},
{
"date": "2019-02-08T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-012880"
},
{
"date": "2019-10-03T00:03:26.223000",
"db": "NVD",
"id": "CVE-2018-18563"
},
{
"date": "2020-07-07T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201811-116"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote or local",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201811-116"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural Roche Access control vulnerabilities in products",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-012880"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Code problem",
"sources": [
{
"db": "IVD",
"id": "7d81238f-463f-11e9-8b84-000c29342cb1"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-116"
}
],
"trust": 0.8
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…