CVE-2018-18563

Severity: critical (CVSS 9.6 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-11-20 · updated 2026-06-17
Weakness: CWE-434

Description

An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000), CoaguChek Pro II before 04.03.00, CoaguChek XS Plus before 03.01.06, CoaguChek XS Pro before 03.01.06, cobas h 232 before 03.01.03 (Serial Number below KQ0400000 or KS0400000) and cobas h 232 before 04.00.04 (Serial Number above KQ0400000 or KS0400000). Improper access control to a service command allows attackers in the adjacent network to execute arbitrary code on the system through a crafted Poct1-A message.

Affected products

Roche Accu-Chek Inform Ii Firmware: before 03.06.00; from 04.00.00 before 04.03.00 — fixed in 03.06.00, 04.03.00
Roche Coaguchek Pro Ii Firmware: before 04.03.00 — fixed in 04.03.00
Roche Coaguchek Xs Plus Firmware: before 03.01.06 — fixed in 03.01.06
Roche Coaguchek Xs Pro Firmware: before 03.01.06 — fixed in 03.01.06
Roche Cobas H 232 Firmware: before 03.01.03; from 04.00.00 before 04.00.04 — fixed in 03.01.03, 04.00.04

How to fix

Upgrade to a fixed version: Roche Accu-Chek Inform Ii Firmware 03.06.00, 04.03.00; Roche Coaguchek Pro Ii Firmware 04.03.00; Roche Coaguchek Xs Plus Firmware 03.01.06; Roche Coaguchek Xs Pro Firmware 03.01.06; Roche Cobas H 232 Firmware 03.01.03, 04.00.04. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2018-18563 or the next vulnerability affects your stack