CVE:CVE-2018-18565
CNNVD:CNNVD-201811-118
Roche Accu-Chek Inform II Instrument等都是瑞士Roche公司的产品。Accu-Chek Inform II Instrument是一款用于葡萄糖测试和监测的手持式设备。CoaguChek Pro II是一款用于凝血功能检测的设备。cobas h 232是一款心血管疾病分析设备。
多款Roche设备中存在权限许可和访问控制问题漏洞。攻击者可利用该漏洞更改配置。以下设备及版本受到影响:Accu-Chek Inform II Instrument 03.06.00之前的版本，04.03.00之前的04.x版本；CoaguChek Pro II 04.03.00之前的版本；CoaguChek XS Plus 03.01.06之前的版本；CoaguChek XS Pro 03.01.06之前的版本；cobas h 232 03.01.03之前的版本，04.00.04之前的版本。
solution:Upgrade roche accu-chek_inform_ii_firmware to a higher version than 03.06.00,04.03.00,and avoid the version (,03.06.00),[04.00.00,04.03.00); Upgrade roche cobas_h_232_firmware to a higher version than 03.01.03,04.00.04,and avoid the version (,03.01.03),[04.00.00,04.00.04); Upgrade roche coaguchek_pro_ii_firmware to a higher version than 04.03.00,and avoid the version (,04.03.00); Upgrade roche coaguchek_xs_plus_firmware to a higher version than 03.01.06,and avoid the version (,03.01.06); Upgrade roche coaguchek_xs_pro_firmware to a higher version than 03.01.06,and avoid the version (,03.01.06)