VAR-201811-0061
Vulnerability from variot - Updated: 2023-12-18 12:43An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000), CoaguChek Pro II before 04.03.00, and cobas h 232 before 04.00.04 (Serial number above KQ0400000 or KS0400000). Improper access control allows attackers in the adjacent network to change the instrument configuration. RocheAccu-ChekInformIIInstrument, CoaguChekProII and cobash232 are all hand-held blood testing medical devices from Roche, Switzerland. Permissions and access control vulnerabilities exist in multiple Roche devices, which can be exploited by an attacker to create arbitrary code on the system through specially crafted messages. Multiple Roche Point of Care Handheld Medical Services are prone to the following security vulnerabilities: 1. An authentication bypass vulnerability 2. An OS command-injection vulnerability 3. An arbitrary file-upload vulnerability 4. A remote code-execution vulnerability 5. An access bypass vulnerability An attacker can exploit these issues to bypass authentication mechanism, execute arbitrary commands and codes, upload arbitrary files, or to bypass security restrictions
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201811-0061",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "coaguchek pro ii",
"scope": "lt",
"trust": 1.6,
"vendor": "roche",
"version": "04.03.00"
},
{
"model": "cobas h 232",
"scope": "lt",
"trust": 1.0,
"vendor": "roche",
"version": "04.00.04"
},
{
"model": "accu-chek inform ii",
"scope": "lt",
"trust": 1.0,
"vendor": "roche",
"version": "03.06.00"
},
{
"model": "accu-chek inform ii",
"scope": "lt",
"trust": 1.0,
"vendor": "roche",
"version": "04.03.00"
},
{
"model": "accu-chek inform ii",
"scope": "gte",
"trust": 1.0,
"vendor": "roche",
"version": "04.00.00"
},
{
"model": "accu-chek inform ii",
"scope": "eq",
"trust": 0.8,
"vendor": "roche diagnostics",
"version": "04.03.00"
},
{
"model": "accu-chek inform ii",
"scope": "lt",
"trust": 0.8,
"vendor": "roche diagnostics",
"version": "of 04.x"
},
{
"model": "accu-chek inform ii instrument",
"scope": "lt",
"trust": 0.6,
"vendor": "roche",
"version": "03.06.00"
},
{
"model": "cobas h",
"scope": "eq",
"trust": 0.6,
"vendor": "roche",
"version": "232\u003c04.00.04"
},
{
"model": null,
"scope": "eq",
"trust": 0.4,
"vendor": "accu chek inform ii",
"version": "*"
},
{
"model": "cobas h",
"scope": "eq",
"trust": 0.3,
"vendor": "roche",
"version": "2320"
},
{
"model": "coaguchek xs pro",
"scope": "eq",
"trust": 0.3,
"vendor": "roche",
"version": "0"
},
{
"model": "coaguchek xs plus",
"scope": "eq",
"trust": 0.3,
"vendor": "roche",
"version": "0"
},
{
"model": "coaguchek pro ii",
"scope": "eq",
"trust": 0.3,
"vendor": "roche",
"version": "0"
},
{
"model": "coaguchek",
"scope": "eq",
"trust": 0.3,
"vendor": "roche",
"version": "0"
},
{
"model": "accu-chek inform ii instrument",
"scope": "eq",
"trust": 0.3,
"vendor": "roche",
"version": "0"
},
{
"model": "cobas h",
"scope": "ne",
"trust": 0.3,
"vendor": "roche",
"version": "2324.0.4"
},
{
"model": "cobas h",
"scope": "ne",
"trust": 0.3,
"vendor": "roche",
"version": "2323.1.4"
},
{
"model": "cobas h",
"scope": "ne",
"trust": 0.3,
"vendor": "roche",
"version": "2323.1.3"
},
{
"model": "coaguchek xs pro",
"scope": "ne",
"trust": 0.3,
"vendor": "roche",
"version": "3.1.6"
},
{
"model": "coaguchek xs plus",
"scope": "ne",
"trust": 0.3,
"vendor": "roche",
"version": "3.1.6"
},
{
"model": "coaguchek pro ii",
"scope": "ne",
"trust": 0.3,
"vendor": "roche",
"version": "4.3"
},
{
"model": "coaguchek",
"scope": "ne",
"trust": 0.3,
"vendor": "roche",
"version": "3.1.4"
},
{
"model": "accu-chek inform ii instrument",
"scope": "ne",
"trust": 0.3,
"vendor": "roche",
"version": "3.6"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "cobas h 232",
"version": "*"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "coaguchek pro ii",
"version": "*"
}
],
"sources": [
{
"db": "IVD",
"id": "7d80d56e-463f-11e9-9d04-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-25431"
},
{
"db": "BID",
"id": "105843"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-012881"
},
{
"db": "NVD",
"id": "CVE-2018-18564"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:roche:accu-chek_inform_ii_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "04.03.00",
"versionStartIncluding": "04.00.00",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:roche:accu-chek_inform_ii_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "03.06.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:roche:accu-chek_inform_ii:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:roche:cobas_h_232_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "04.00.04",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:roche:cobas_h_232:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:roche:coaguchek_pro_ii_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "04.03.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:roche:coaguchek_pro_ii:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2018-18564"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Niv Yehezkel of Medigate",
"sources": [
{
"db": "BID",
"id": "105843"
}
],
"trust": 0.3
},
"cve": "CVE-2018-18564",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "LOW",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"confidentialityImpact": "NONE",
"exploitabilityScore": 6.5,
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "LOW",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:A/AC:L/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Adjacent Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 3.3,
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "CVE-2018-18564",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Low",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:A/AC:L/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 6.8,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.2,
"id": "CNVD-2018-25431",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:A/AC:H/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "COMPLETE",
"baseScore": 6.8,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.2,
"id": "7d80d56e-463f-11e9-9d04-000c29342cb1",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "MEDIUM",
"trust": 0.2,
"vectorString": "AV:A/AC:H/Au:N/C:C/I:C/A:C",
"version": "2.9 [IVD]"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"author": "NVD",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"exploitabilityScore": 2.8,
"impactScore": 4.0,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
"version": "3.0"
},
{
"attackComplexity": "Low",
"attackVector": "Adjacent Network",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 7.4,
"baseSeverity": "High",
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "CVE-2018-18564",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Changed",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "NVD",
"id": "CVE-2018-18564",
"trust": 1.8,
"value": "HIGH"
},
{
"author": "CNVD",
"id": "CNVD-2018-25431",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201811-117",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "IVD",
"id": "7d80d56e-463f-11e9-9d04-000c29342cb1",
"trust": 0.2,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "7d80d56e-463f-11e9-9d04-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-25431"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-012881"
},
{
"db": "NVD",
"id": "CVE-2018-18564"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-117"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000), CoaguChek Pro II before 04.03.00, and cobas h 232 before 04.00.04 (Serial number above KQ0400000 or KS0400000). Improper access control allows attackers in the adjacent network to change the instrument configuration. RocheAccu-ChekInformIIInstrument, CoaguChekProII and cobash232 are all hand-held blood testing medical devices from Roche, Switzerland. Permissions and access control vulnerabilities exist in multiple Roche devices, which can be exploited by an attacker to create arbitrary code on the system through specially crafted messages. Multiple Roche Point of Care Handheld Medical Services are prone to the following security vulnerabilities:\n1. An authentication bypass vulnerability\n2. An OS command-injection vulnerability\n3. An arbitrary file-upload vulnerability\n4. A remote code-execution vulnerability\n5. An access bypass vulnerability\nAn attacker can exploit these issues to bypass authentication mechanism, execute arbitrary commands and codes, upload arbitrary files, or to bypass security restrictions",
"sources": [
{
"db": "NVD",
"id": "CVE-2018-18564"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-012881"
},
{
"db": "CNVD",
"id": "CNVD-2018-25431"
},
{
"db": "BID",
"id": "105843"
},
{
"db": "IVD",
"id": "7d80d56e-463f-11e9-9d04-000c29342cb1"
}
],
"trust": 2.61
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2018-18564",
"trust": 3.5
},
{
"db": "ICS CERT",
"id": "ICSMA-18-310-01",
"trust": 3.3
},
{
"db": "BID",
"id": "105843",
"trust": 1.9
},
{
"db": "CNVD",
"id": "CNVD-2018-25431",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201811-117",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2018-012881",
"trust": 0.8
},
{
"db": "IVD",
"id": "7D80D56E-463F-11E9-9D04-000C29342CB1",
"trust": 0.2
}
],
"sources": [
{
"db": "IVD",
"id": "7d80d56e-463f-11e9-9d04-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-25431"
},
{
"db": "BID",
"id": "105843"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-012881"
},
{
"db": "NVD",
"id": "CVE-2018-18564"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-117"
}
]
},
"id": "VAR-201811-0061",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "7d80d56e-463f-11e9-9d04-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-25431"
}
],
"trust": 1.542857146
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS",
"Network device"
],
"sub_category": null,
"trust": 0.6
},
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.2
}
],
"sources": [
{
"db": "IVD",
"id": "7d80d56e-463f-11e9-9d04-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-25431"
}
]
},
"last_update_date": "2023-12-18T12:43:46.029000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "https://diagnostics.roche.com/us/en/home.html"
},
{
"title": "Patches for Multiple Roche Device Permissions and Access Control Vulnerabilities (CNVD-2018-25431)",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchinfo/show/147333"
},
{
"title": "Multiple Roche Fixes for device permissions and access control vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=100319"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-25431"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-012881"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-117"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-noinfo",
"trust": 1.0
},
{
"problemtype": "CWE-284",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-012881"
},
{
"db": "NVD",
"id": "CVE-2018-18564"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.3,
"url": "https://ics-cert.us-cert.gov/advisories/icsma-18-310-01"
},
{
"trust": 1.6,
"url": "http://www.securityfocus.com/bid/105843"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-18564"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-18564"
},
{
"trust": 0.3,
"url": "https://www.roche.com/"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-25431"
},
{
"db": "BID",
"id": "105843"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-012881"
},
{
"db": "NVD",
"id": "CVE-2018-18564"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-117"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "7d80d56e-463f-11e9-9d04-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-25431"
},
{
"db": "BID",
"id": "105843"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-012881"
},
{
"db": "NVD",
"id": "CVE-2018-18564"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-117"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-12-14T00:00:00",
"db": "IVD",
"id": "7d80d56e-463f-11e9-9d04-000c29342cb1"
},
{
"date": "2018-12-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-25431"
},
{
"date": "2018-11-06T00:00:00",
"db": "BID",
"id": "105843"
},
{
"date": "2019-02-08T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-012881"
},
{
"date": "2018-11-20T19:29:00.900000",
"db": "NVD",
"id": "CVE-2018-18564"
},
{
"date": "2018-11-07T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201811-117"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-12-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-25431"
},
{
"date": "2018-11-06T00:00:00",
"db": "BID",
"id": "105843"
},
{
"date": "2019-02-08T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-012881"
},
{
"date": "2020-08-24T17:37:01.140000",
"db": "NVD",
"id": "CVE-2018-18564"
},
{
"date": "2020-08-25T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201811-117"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote or local",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201811-117"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural Roche Access control vulnerabilities in products",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-012881"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Access control error",
"sources": [
{
"db": "IVD",
"id": "7d80d56e-463f-11e9-9d04-000c29342cb1"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-117"
}
],
"trust": 0.8
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…