QwikSec

Security Database

CVE

CWE

Training

CVE-2018-10631

Published: Jul 13, 2018

Modified: Aug 26, 2025

PUBLISHED

CVSS v3.1

6.3

MEDIUM

Description

The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870 Application Card and sufficient technical capability can modify the contents of this card, including the binary executables. If modified to bypass protection mechanisms, this malicious code will be run when the card is inserted into an 8840 Clinician Programmer.

Vendor	Product	Versions
Medtronic	8840 N’Vision Clinician Programmer	affected `All versions`
Medtronic	8870 N’Vision removable Application Card	affected `All versions`

Weaknesses (CWE)

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Physical

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

References

https://global.medtronic.com/xg-en/product-security/security-bulletins/nvision.html

https://www.medtronic.com/security

https://ics-cert.us-cert.gov/advisories/ICSMA-18-137-01

http://www.securityfocus.com/bid/104213

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.