Details of VAR-201811-0061

ID

VAR-201811-0061

CVE

CVE-2018-18564

TITLE

plural Roche Access control vulnerabilities in products

Trust: 0.8

sources: JVNDB: JVNDB-2018-012881

DESCRIPTION

An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000), CoaguChek Pro II before 04.03.00, and cobas h 232 before 04.00.04 (Serial number above KQ0400000 or KS0400000). Improper access control allows attackers in the adjacent network to change the instrument configuration. RocheAccu-ChekInformIIInstrument, CoaguChekProII and cobash232 are all hand-held blood testing medical devices from Roche, Switzerland. Permissions and access control vulnerabilities exist in multiple Roche devices, which can be exploited by an attacker to create arbitrary code on the system through specially crafted messages. Multiple Roche Point of Care Handheld Medical Services are prone to the following security vulnerabilities: 1. An authentication bypass vulnerability 2. An OS command-injection vulnerability 3. An arbitrary file-upload vulnerability 4. A remote code-execution vulnerability 5. An access bypass vulnerability An attacker can exploit these issues to bypass authentication mechanism, execute arbitrary commands and codes, upload arbitrary files, or to bypass security restrictions

Trust: 2.61

sources: NVD: CVE-2018-18564 // JVNDB: JVNDB-2018-012881 // CNVD: CNVD-2018-25431 // BID: 105843 // IVD: 7d80d56e-463f-11e9-9d04-000c29342cb1

IOT TAXONOMY

category:	['ICS', 'Network device']	sub_category:	-	Trust: 0.6
category:	['ICS']	sub_category:	-	Trust: 0.2

sources: IVD: 7d80d56e-463f-11e9-9d04-000c29342cb1 // CNVD: CNVD-2018-25431

AFFECTED PRODUCTS

vendor:	roche	model:	coaguchek pro ii	scope:	lt	version:	04.03.00	Trust: 1.6
vendor:	roche	model:	accu-chek inform ii	scope:	lt	version:	04.03.00	Trust: 1.0
vendor:	roche	model:	cobas h 232	scope:	lt	version:	04.00.04	Trust: 1.0
vendor:	roche	model:	accu-chek inform ii	scope:	lt	version:	03.06.00	Trust: 1.0
vendor:	roche	model:	accu-chek inform ii	scope:	gte	version:	04.00.00	Trust: 1.0
vendor:	roche diagnostics	model:	accu-chek inform ii	scope:	eq	version:	04.03.00	Trust: 0.8
vendor:	roche diagnostics	model:	accu-chek inform ii	scope:	lt	version:	of 04.x	Trust: 0.8
vendor:	roche	model:	accu-chek inform ii instrument	scope:	lt	version:	03.06.00	Trust: 0.6
vendor:	roche	model:	cobas h	scope:	eq	version:	232<04.00.04	Trust: 0.6
vendor:	accu chek inform ii	model:	-	scope:	eq	version:	*	Trust: 0.4
vendor:	roche	model:	cobas h	scope:	eq	version:	2320	Trust: 0.3
vendor:	roche	model:	coaguchek xs pro	scope:	eq	version:	0	Trust: 0.3
vendor:	roche	model:	coaguchek xs plus	scope:	eq	version:	0	Trust: 0.3
vendor:	roche	model:	coaguchek pro ii	scope:	eq	version:	0	Trust: 0.3
vendor:	roche	model:	coaguchek	scope:	eq	version:	0	Trust: 0.3
vendor:	roche	model:	accu-chek inform ii instrument	scope:	eq	version:	0	Trust: 0.3
vendor:	roche	model:	cobas h	scope:	ne	version:	2324.0.4	Trust: 0.3
vendor:	roche	model:	cobas h	scope:	ne	version:	2323.1.4	Trust: 0.3
vendor:	roche	model:	cobas h	scope:	ne	version:	2323.1.3	Trust: 0.3
vendor:	roche	model:	coaguchek xs pro	scope:	ne	version:	3.1.6	Trust: 0.3
vendor:	roche	model:	coaguchek xs plus	scope:	ne	version:	3.1.6	Trust: 0.3
vendor:	roche	model:	coaguchek pro ii	scope:	ne	version:	4.3	Trust: 0.3
vendor:	roche	model:	coaguchek	scope:	ne	version:	3.1.4	Trust: 0.3
vendor:	roche	model:	accu-chek inform ii instrument	scope:	ne	version:	3.6	Trust: 0.3
vendor:	cobas h 232	model:	-	scope:	eq	version:	*	Trust: 0.2
vendor:	coaguchek pro ii	model:	-	scope:	eq	version:	*	Trust: 0.2

sources: IVD: 7d80d56e-463f-11e9-9d04-000c29342cb1 // CNVD: CNVD-2018-25431 // BID: 105843 // JVNDB: JVNDB-2018-012881 // NVD: CVE-2018-18564

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2018-18564
value:	HIGH
Trust: 1.0
NVD:	CVE-2018-18564
value:	HIGH
Trust: 0.8
CNVD:	CNVD-2018-25431
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-201811-117
value:	HIGH
Trust: 0.6
IVD:	7d80d56e-463f-11e9-9d04-000c29342cb1
value:	HIGH
Trust: 0.2

nvd@nist.gov:	CVE-2018-18564
severity:	LOW
baseScore:	3.3
vectorString:	AV:A/AC:L/AU:N/C:N/I:P/A:N
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	6.5
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2018-25431
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:A/AC:H/AU:N/C:C/I:C/A:C
accessVector:	ADJACENT_NETWORK
accessComplexity:	HIGH
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.2
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
IVD:	7d80d56e-463f-11e9-9d04-000c29342cb1
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:A/AC:H/AU:N/C:C/I:C/A:C
accessVector:	ADJACENT_NETWORK
accessComplexity:	HIGH
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.2
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2

nvd@nist.gov:	CVE-2018-18564
baseSeverity:	HIGH
baseScore:	7.4
vectorString:	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
attackVector:	ADJACENT
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	CHANGED
confidentialityImpact:	NONE
integrityImpact:	HIGH
availabilityImpact:	NONE
exploitabilityScore:	2.8
impactScore:	4.0
version:	3.0
Trust: 1.8

sources: IVD: 7d80d56e-463f-11e9-9d04-000c29342cb1 // CNVD: CNVD-2018-25431 // JVNDB: JVNDB-2018-012881 // CNNVD: CNNVD-201811-117 // NVD: CVE-2018-18564

PROBLEMTYPE DATA

problemtype:	NVD-CWE-noinfo	Trust: 1.0
problemtype:	CWE-284	Trust: 0.8

sources: JVNDB: JVNDB-2018-012881 // NVD: CVE-2018-18564

THREAT TYPE

remote or local

Trust: 0.6

sources: CNNVD: CNNVD-201811-117

TYPE

Access control error

Trust: 0.8

sources: IVD: 7d80d56e-463f-11e9-9d04-000c29342cb1 // CNNVD: CNNVD-201811-117

CONFIGURATIONS

sources: JVNDB: JVNDB-2018-012881

PATCH

title:	Top Page	url:	https://diagnostics.roche.com/us/en/home.html	Trust: 0.8
title:	Patches for Multiple Roche Device Permissions and Access Control Vulnerabilities (CNVD-2018-25431)	url:	https://www.cnvd.org.cn/patchInfo/show/147333	Trust: 0.6
title:	Multiple Roche Fixes for device permissions and access control vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=100319	Trust: 0.6

sources: CNVD: CNVD-2018-25431 // JVNDB: JVNDB-2018-012881 // CNNVD: CNNVD-201811-117

EXTERNAL IDS

db:	NVD	id:	CVE-2018-18564	Trust: 3.5
db:	ICS CERT	id:	ICSMA-18-310-01	Trust: 3.3
db:	BID	id:	105843	Trust: 1.9
db:	CNVD	id:	CNVD-2018-25431	Trust: 0.8
db:	CNNVD	id:	CNNVD-201811-117	Trust: 0.8
db:	JVNDB	id:	JVNDB-2018-012881	Trust: 0.8
db:	IVD	id:	7D80D56E-463F-11E9-9D04-000C29342CB1	Trust: 0.2

sources: IVD: 7d80d56e-463f-11e9-9d04-000c29342cb1 // CNVD: CNVD-2018-25431 // BID: 105843 // JVNDB: JVNDB-2018-012881 // CNNVD: CNNVD-201811-117 // NVD: CVE-2018-18564

REFERENCES

url:	https://ics-cert.us-cert.gov/advisories/icsma-18-310-01	Trust: 3.3
url:	http://www.securityfocus.com/bid/105843	Trust: 1.6
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-18564	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2018-18564	Trust: 0.8
url:	https://www.roche.com/	Trust: 0.3

sources: CNVD: CNVD-2018-25431 // BID: 105843 // JVNDB: JVNDB-2018-012881 // CNNVD: CNNVD-201811-117 // NVD: CVE-2018-18564

CREDITS

Niv Yehezkel of Medigate

Trust: 0.3

sources: BID: 105843

SOURCES

db:	IVD	id:	7d80d56e-463f-11e9-9d04-000c29342cb1
db:	CNVD	id:	CNVD-2018-25431
db:	BID	id:	105843
db:	JVNDB	id:	JVNDB-2018-012881
db:	CNNVD	id:	CNNVD-201811-117
db:	NVD	id:	CVE-2018-18564

LAST UPDATE DATE

2024-11-23T21:52:40.409000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2018-25431	date:	2018-12-14T00:00:00
db:	BID	id:	105843	date:	2018-11-06T00:00:00
db:	JVNDB	id:	JVNDB-2018-012881	date:	2019-02-08T00:00:00
db:	CNNVD	id:	CNNVD-201811-117	date:	2020-08-25T00:00:00
db:	NVD	id:	CVE-2018-18564	date:	2024-11-21T03:56:09.963

SOURCES RELEASE DATE

db:	IVD	id:	7d80d56e-463f-11e9-9d04-000c29342cb1	date:	2018-12-14T00:00:00
db:	CNVD	id:	CNVD-2018-25431	date:	2018-12-14T00:00:00
db:	BID	id:	105843	date:	2018-11-06T00:00:00
db:	JVNDB	id:	JVNDB-2018-012881	date:	2019-02-08T00:00:00
db:	CNNVD	id:	CNNVD-201811-117	date:	2018-11-07T00:00:00
db:	NVD	id:	CVE-2018-18564	date:	2018-11-20T19:29:00.900