CVE-2018-18564

HIGH Year: 2018
CVSS v3 Score
7.4
High
CVSS v2 Score
3.3
Low
Weakness Type
NVD-CWE-Other
View all →

Vulnerability Description

An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000), CoaguChek Pro II before 04.03.00, and cobas h 232 before 04.00.04 (Serial number above KQ0400000 or KS0400000). Improper access control allows attackers in the adjacent network to change the instrument configuration.

Related Vulnerabilities

CVE-2011-0029

HIGH
CVSS:7.4(High)

Untrusted search path vulnerability in the client in Microsoft Remote Desktop Connection 5.2, 6.0, 6.1, and 7.0 allows local users to gain privileges via a Trojan horse DLL in the current working dire...

NVD-CWE-Other2011

CVE-2015-1947

HIGH
CVSS:7.4(High)

Untrusted search path vulnerability in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0, when a DB2 database is used, allows local users to gain privileges via a Trojan horse library that is ...

NVD-CWE-Other2015

CVE-2015-3272

HIGH
CVSS:7.4(High)

Open redirect vulnerability in the clean_param function in lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to redirec...

NVD-CWE-Other2015

CVE-2015-7393

HIGH
CVSS:7.4(High)

dcoep in BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP AAM 11.4.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP AFM and PEM 11.3...

NVD-CWE-Other2015

CVE-2015-7397

HIGH
CVSS:7.4(High)

Multiple open redirect vulnerabilities in the Aurora starter store in IBM WebSphere Commerce 7.0 through Feature Pack 8 allow remote attackers to redirect users to arbitrary web sites and conduct phis...

NVD-CWE-Other2015

CVE-2015-7428

HIGH
CVSS:7.4(High)

Open redirect vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attack...

NVD-CWE-Other2015