VULNERABILITY INTELLIGENCE

CVE-2018-18630

CVSS score7.8 HIGH
EPSS probability0.33%
CISA KEVNot currently listed
Published2019-09-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

A vulnerability was found in McKesson Cardiology product 13.x and 14.x. Insecure file permissions in the default installation may allow an attacker with local system access to execute unauthorized arbitrary code.

Weakness classification

  • CWE-732: Incorrect Permission Assignment for Critical Resource

Primary references