High severity7.8NVD Advisory· Published Sep 6, 2019· Updated Jun 17, 2026
CVE-2018-18630
CVE-2018-18630
Description
A vulnerability was found in McKesson Cardiology product 13.x and 14.x. Insecure file permissions in the default installation may allow an attacker with local system access to execute unauthorized arbitrary code.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:o:mckesson:horizon_cardiology_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:mckesson:horizon_cardiology_firmware:*:*:*:*:*:*:*:*range: >=12.0,<=12.2
- cpe:2.3:o:mckesson:horizon_cardiology_firmware:11.0:*:*:*:*:*:*:*
cpe:2.3:o:mckesson:cardiology_firmware:13.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:mckesson:cardiology_firmware:13.0:*:*:*:*:*:*:*
- cpe:2.3:o:mckesson:cardiology_firmware:14.0:*:*:*:*:*:*:*
- cpe:2.3:o:changehealthcare:cardiology_firmware:14.1.0:*:*:*:*:*:*:*
- McKesson/Cardiology productdescription
- Range: 13.x, 14.x
Patches
Vulnerability mechanics
References
2- www.hipaajournal.com/code-execution-vulnerability-identified-in-change-healthcare-cardiology-devices/nvdThird Party Advisory
- www.us-cert.gov/ics/advisories/icsma-19-241-01nvdThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.