Detections
Analytics

CVE-2018-18630

high

Description

A vulnerability was found in McKesson Cardiology product 13.x and 14.x. Insecure file permissions in the default installation may allow an attacker with local system access to execute unauthorized arbitrary code.

References

https://www.us-cert.gov/ics/advisories/icsma-19-241-01

https://www.hipaajournal.com/code-execution-vulnerability-identified-in-change-healthcare-cardiology-devices/

Details

Source: Mitre, NVD

Published: 2019-09-06

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 7.8

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.0004