CVE-2018-18630

2019-09-0616:24:48

mitre

www.cve.org

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

A vulnerability was found in McKesson Cardiology product 13.x and 14.x. Insecure file permissions in the default installation may allow an attacker with local system access to execute unauthorized arbitrary code.

References

www.hipaajournal.com/code-execution-vulnerability-identified-in-change-healthcare-cardiology-devices/

www.us-cert.gov/ics/advisories/icsma-19-241-01