VAR-201811-0062
Vulnerability from variot - Updated: 2023-12-18 12:43An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000), CoaguChek Pro II before 04.03.00, CoaguChek XS Plus before 03.01.06, CoaguChek XS Pro before 03.01.06, cobas h 232 before 03.01.03 (Serial number below KQ0400000 or KS0400000), and cobas h 232 before 04.00.04 (Serial number above KQ0400000 or KS0400000). A vulnerability in the software update mechanism allows authenticated attackers in the adjacent network to overwrite arbitrary files on the system through a crafted update package. plural Roche The product contains a vulnerability related to unlimited uploads of dangerous types of files.Information may be tampered with. RocheAccu-ChekInformIIInstrument and others are hand-held blood test medical devices from Roche, Switzerland. Permissions and access control vulnerabilities exist in several Roche devices that an attacker can use to change configurations. Multiple Roche Point of Care Handheld Medical Services are prone to the following security vulnerabilities: 1. An authentication bypass vulnerability 2. An OS command-injection vulnerability 3. An arbitrary file-upload vulnerability 4. A remote code-execution vulnerability 5. An access bypass vulnerability An attacker can exploit these issues to bypass authentication mechanism, execute arbitrary commands and codes, upload arbitrary files, or to bypass security restrictions
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201811-0062",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "coaguchek pro ii",
"scope": "lt",
"trust": 1.6,
"vendor": "roche",
"version": "04.03.00"
},
{
"model": "cobas h 232",
"scope": "lt",
"trust": 1.0,
"vendor": "roche",
"version": "04.00.04"
},
{
"model": "cobas h 232",
"scope": "lt",
"trust": 1.0,
"vendor": "roche",
"version": "03.01.03"
},
{
"model": "coaguchek xs plus",
"scope": "lt",
"trust": 1.0,
"vendor": "roche",
"version": "03.01.06"
},
{
"model": "cobas h 232",
"scope": "gte",
"trust": 1.0,
"vendor": "roche",
"version": "04.00.00"
},
{
"model": "accu-chek inform ii",
"scope": "lt",
"trust": 1.0,
"vendor": "roche",
"version": "03.06.00"
},
{
"model": "accu-chek inform ii",
"scope": "lt",
"trust": 1.0,
"vendor": "roche",
"version": "04.03.00"
},
{
"model": "accu-chek inform ii",
"scope": "gte",
"trust": 1.0,
"vendor": "roche",
"version": "04.00.00"
},
{
"model": "coaguchek xs pro",
"scope": "lt",
"trust": 1.0,
"vendor": "roche",
"version": "03.01.06"
},
{
"model": "accu-chek inform ii",
"scope": "eq",
"trust": 0.8,
"vendor": "roche diagnostics",
"version": "04.03.00"
},
{
"model": "accu-chek inform ii",
"scope": "lt",
"trust": 0.8,
"vendor": "roche diagnostics",
"version": "of 04.x"
},
{
"model": "accu-chek inform ii instrument",
"scope": "lt",
"trust": 0.6,
"vendor": "roche",
"version": "03.06.00"
},
{
"model": "cobas h",
"scope": "eq",
"trust": 0.6,
"vendor": "roche",
"version": "232\u003c03.01.03"
},
{
"model": "cobas h",
"scope": "eq",
"trust": 0.6,
"vendor": "roche",
"version": "232\u003c04.00.04"
},
{
"model": "coaguchek xs plus and pro",
"scope": "lt",
"trust": 0.6,
"vendor": "roche",
"version": "03.01.06"
},
{
"model": null,
"scope": "eq",
"trust": 0.4,
"vendor": "accu chek inform ii",
"version": "*"
},
{
"model": null,
"scope": "eq",
"trust": 0.4,
"vendor": "cobas h 232",
"version": "*"
},
{
"model": "cobas h",
"scope": "eq",
"trust": 0.3,
"vendor": "roche",
"version": "2320"
},
{
"model": "coaguchek xs pro",
"scope": "eq",
"trust": 0.3,
"vendor": "roche",
"version": "0"
},
{
"model": "coaguchek xs plus",
"scope": "eq",
"trust": 0.3,
"vendor": "roche",
"version": "0"
},
{
"model": "coaguchek pro ii",
"scope": "eq",
"trust": 0.3,
"vendor": "roche",
"version": "0"
},
{
"model": "coaguchek",
"scope": "eq",
"trust": 0.3,
"vendor": "roche",
"version": "0"
},
{
"model": "accu-chek inform ii instrument",
"scope": "eq",
"trust": 0.3,
"vendor": "roche",
"version": "0"
},
{
"model": "cobas h",
"scope": "ne",
"trust": 0.3,
"vendor": "roche",
"version": "2324.0.4"
},
{
"model": "cobas h",
"scope": "ne",
"trust": 0.3,
"vendor": "roche",
"version": "2323.1.4"
},
{
"model": "cobas h",
"scope": "ne",
"trust": 0.3,
"vendor": "roche",
"version": "2323.1.3"
},
{
"model": "coaguchek xs pro",
"scope": "ne",
"trust": 0.3,
"vendor": "roche",
"version": "3.1.6"
},
{
"model": "coaguchek xs plus",
"scope": "ne",
"trust": 0.3,
"vendor": "roche",
"version": "3.1.6"
},
{
"model": "coaguchek pro ii",
"scope": "ne",
"trust": 0.3,
"vendor": "roche",
"version": "4.3"
},
{
"model": "coaguchek",
"scope": "ne",
"trust": 0.3,
"vendor": "roche",
"version": "3.1.4"
},
{
"model": "accu-chek inform ii instrument",
"scope": "ne",
"trust": 0.3,
"vendor": "roche",
"version": "3.6"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "coaguchek pro ii",
"version": "*"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "coaguchek xs plus",
"version": "*"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "coaguchek xs pro",
"version": "*"
}
],
"sources": [
{
"db": "IVD",
"id": "7d80fc80-463f-11e9-86d0-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-25430"
},
{
"db": "BID",
"id": "105843"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-012882"
},
{
"db": "NVD",
"id": "CVE-2018-18565"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:roche:accu-chek_inform_ii_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "04.03.00",
"versionStartIncluding": "04.00.00",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:roche:accu-chek_inform_ii_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "03.06.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:roche:accu-chek_inform_ii:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:roche:cobas_h_232_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "04.00.04",
"versionStartIncluding": "04.00.00",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:roche:cobas_h_232_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "03.01.03",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:roche:cobas_h_232:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:roche:coaguchek_pro_ii_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "04.03.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:roche:coaguchek_pro_ii:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:roche:coaguchek_xs_plus_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "03.01.06",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:roche:coaguchek_xs_plus:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:roche:coaguchek_xs_pro_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "03.01.06",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:roche:coaguchek_xs_pro:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2018-18565"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Niv Yehezkel of Medigate",
"sources": [
{
"db": "BID",
"id": "105843"
}
],
"trust": 0.3
},
"cve": "CVE-2018-18565",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "LOW",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"author": "NVD",
"availabilityImpact": "PARTIAL",
"baseScore": 4.1,
"confidentialityImpact": "NONE",
"exploitabilityScore": 5.1,
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:A/AC:L/Au:S/C:N/I:P/A:P",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Adjacent Network",
"authentication": "Single",
"author": "NVD",
"availabilityImpact": "Partial",
"baseScore": 4.1,
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "CVE-2018-18565",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:A/AC:L/Au:S/C:N/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 6.5,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.2,
"id": "CNVD-2018-25430",
"impactScore": 9.5,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:A/AC:H/Au:N/C:C/I:P/A:C",
"version": "2.0"
},
{
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "COMPLETE",
"baseScore": 6.5,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.2,
"id": "7d80fc80-463f-11e9-86d0-000c29342cb1",
"impactScore": 9.5,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.2,
"vectorString": "AV:A/AC:H/Au:N/C:C/I:P/A:C",
"version": "2.9 [IVD]"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"author": "NVD",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"exploitabilityScore": 2.3,
"impactScore": 4.0,
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
"version": "3.0"
},
{
"attackComplexity": "Low",
"attackVector": "Adjacent Network",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 6.8,
"baseSeverity": "Medium",
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "CVE-2018-18565",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "Low",
"scope": "Changed",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "NVD",
"id": "CVE-2018-18565",
"trust": 1.8,
"value": "MEDIUM"
},
{
"author": "CNVD",
"id": "CNVD-2018-25430",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201811-118",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "IVD",
"id": "7d80fc80-463f-11e9-86d0-000c29342cb1",
"trust": 0.2,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "7d80fc80-463f-11e9-86d0-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-25430"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-012882"
},
{
"db": "NVD",
"id": "CVE-2018-18565"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-118"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000), CoaguChek Pro II before 04.03.00, CoaguChek XS Plus before 03.01.06, CoaguChek XS Pro before 03.01.06, cobas h 232 before 03.01.03 (Serial number below KQ0400000 or KS0400000), and cobas h 232 before 04.00.04 (Serial number above KQ0400000 or KS0400000). A vulnerability in the software update mechanism allows authenticated attackers in the adjacent network to overwrite arbitrary files on the system through a crafted update package. plural Roche The product contains a vulnerability related to unlimited uploads of dangerous types of files.Information may be tampered with. RocheAccu-ChekInformIIInstrument and others are hand-held blood test medical devices from Roche, Switzerland. Permissions and access control vulnerabilities exist in several Roche devices that an attacker can use to change configurations. Multiple Roche Point of Care Handheld Medical Services are prone to the following security vulnerabilities:\n1. An authentication bypass vulnerability\n2. An OS command-injection vulnerability\n3. An arbitrary file-upload vulnerability\n4. A remote code-execution vulnerability\n5. An access bypass vulnerability\nAn attacker can exploit these issues to bypass authentication mechanism, execute arbitrary commands and codes, upload arbitrary files, or to bypass security restrictions",
"sources": [
{
"db": "NVD",
"id": "CVE-2018-18565"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-012882"
},
{
"db": "CNVD",
"id": "CNVD-2018-25430"
},
{
"db": "BID",
"id": "105843"
},
{
"db": "IVD",
"id": "7d80fc80-463f-11e9-86d0-000c29342cb1"
}
],
"trust": 2.61
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2018-18565",
"trust": 3.5
},
{
"db": "ICS CERT",
"id": "ICSMA-18-310-01",
"trust": 3.3
},
{
"db": "BID",
"id": "105843",
"trust": 1.9
},
{
"db": "CNVD",
"id": "CNVD-2018-25430",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201811-118",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2018-012882",
"trust": 0.8
},
{
"db": "IVD",
"id": "7D80FC80-463F-11E9-86D0-000C29342CB1",
"trust": 0.2
}
],
"sources": [
{
"db": "IVD",
"id": "7d80fc80-463f-11e9-86d0-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-25430"
},
{
"db": "BID",
"id": "105843"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-012882"
},
{
"db": "NVD",
"id": "CVE-2018-18565"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-118"
}
]
},
"id": "VAR-201811-0062",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "7d80fc80-463f-11e9-86d0-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-25430"
}
],
"trust": 1.5857142883333335
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS",
"Network device"
],
"sub_category": null,
"trust": 0.6
},
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.2
}
],
"sources": [
{
"db": "IVD",
"id": "7d80fc80-463f-11e9-86d0-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-25430"
}
]
},
"last_update_date": "2023-12-18T12:43:46.142000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "https://diagnostics.roche.com/us/en/home.html"
},
{
"title": "Patches for Multiple Roche Device Permissions and Access Control Vulnerabilities (CNVD-2018-25430)",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchinfo/show/147341"
},
{
"title": "Multiple Roche Fixing measures for device permission permission and access control problems",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=123185"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-25430"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-012882"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-118"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-434",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-012882"
},
{
"db": "NVD",
"id": "CVE-2018-18565"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.3,
"url": "https://ics-cert.us-cert.gov/advisories/icsma-18-310-01"
},
{
"trust": 1.6,
"url": "http://www.securityfocus.com/bid/105843"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-18565"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-18565"
},
{
"trust": 0.3,
"url": "https://www.roche.com/"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-25430"
},
{
"db": "BID",
"id": "105843"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-012882"
},
{
"db": "NVD",
"id": "CVE-2018-18565"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-118"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "7d80fc80-463f-11e9-86d0-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2018-25430"
},
{
"db": "BID",
"id": "105843"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-012882"
},
{
"db": "NVD",
"id": "CVE-2018-18565"
},
{
"db": "CNNVD",
"id": "CNNVD-201811-118"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-12-14T00:00:00",
"db": "IVD",
"id": "7d80fc80-463f-11e9-86d0-000c29342cb1"
},
{
"date": "2018-12-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-25430"
},
{
"date": "2018-11-06T00:00:00",
"db": "BID",
"id": "105843"
},
{
"date": "2019-02-08T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-012882"
},
{
"date": "2018-11-20T19:29:00.963000",
"db": "NVD",
"id": "CVE-2018-18565"
},
{
"date": "2018-11-07T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201811-118"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-12-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-25430"
},
{
"date": "2018-11-06T00:00:00",
"db": "BID",
"id": "105843"
},
{
"date": "2019-02-08T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-012882"
},
{
"date": "2018-12-28T14:17:14.250000",
"db": "NVD",
"id": "CVE-2018-18565"
},
{
"date": "2020-07-07T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201811-118"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "specific network environment",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201811-118"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural Roche Product unrestricted upload vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-012882"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "permissions and access control issues",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201811-118"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…