An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Seria…

published 2018-11-20 7 y ago modified 2026-06-17 4 mo ago also EUVD-2018-10285

cvss: 6.8; version 3.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 0.5%; EPSS 0.5% chance of exploitation in 30 days, percentile 41%
public exploits: 0; none known

An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000), CoaguChek Pro II before 04.03.00, CoaguChek XS Plus before 03.01.06, CoaguChek XS Pro before 03.01.06, cobas h 232 before 03.01.03 (Serial number below KQ0400000 or KS0400000), and cobas h 232 before 04.00.04 (Serial number above KQ0400000 or KS0400000). A vulnerability in the software update mechanism allows authenticated attackers in the adjacent network to overwrite arbitrary files on the system through a crafted update package.

Patch / fix

fixed in 5

roche accu-chek_inform_ii_firmware 03.06.00, 04.03.00
roche cobas_h_232_firmware 03.01.03, 04.00.04
roche coaguchek_pro_ii_firmware 04.03.00
roche coaguchek_xs_plus_firmware 03.01.06
roche coaguchek_xs_pro_firmware 03.01.06

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSMA-18-310-01 updated 2018-11-08 cvss 8.2

Roche Diagnostics Point of Care Handheld Medical Devices (Update A)

Roche Diagnostics Point of Care handheld medical devices Accu-Chek Inform II, CoaguChek Pro II, CoaguChek XS Plus, CoaguChek XS Pro
affected: vendor fix roche.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Exploit prediction

0.47% chance of exploitation in the next 30 days, higher than 41% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
NVD	3.0	6.8	CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
NVD	2.0	4.1	AV:A/AC:L/Au:S/C:N/I:P/A:P

Classification

Weakness

CWE-434 Unrestricted Upload of File with Dangerous Type

References

ics-cert.us-cert.gov /advisories/ICSMA-18-310-01
mitigation, third-party-advisory, us-government-resource
securityfocus.com /bid/105843
vdb-entry, third-party-advisory

Sources

CVE List CVE-2018-18565
NVD CVE-2018-18565

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary