Deserialization of untrusted data in Microsoft Messaging Queuing Service in Medtronic's Paceart Optima versions 1.11 and earlier on Windows allows an unauthorized user to impact a healthcare delivery organization’s Paceart Optima system cardiac device causing data to be deleted, stolen, or modified, or the Paceart Optima system being used for further network penetration via network connectivity.
References
| Link | Resource |
|---|---|
| https://global.medtronic.com/xg-en/product-security/security-bulletins/paceart-optima-system.html | Mitigation Vendor Advisory |
| https://global.medtronic.com/xg-en/product-security/security-bulletins/paceart-optima-system.html | Mitigation Vendor Advisory |
Configurations
History
21 Nov 2024, 08:01
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://global.medtronic.com/xg-en/product-security/security-bulletins/paceart-optima-system.html - Mitigation, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
07 Jul 2023, 16:13
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| CWE | CWE-502 | |
| First Time |
Medtronic paceart Optima
Medtronic |
|
| CPE | cpe:2.3:a:medtronic:paceart_optima:*:*:*:*:*:windows:*:* | |
| References | (MISC) https://global.medtronic.com/xg-en/product-security/security-bulletins/paceart-optima-system.html - Mitigation, Vendor Advisory |
29 Jun 2023, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-29 16:15
Updated : 2024-11-21 08:01
NVD link : CVE-2023-31222
Mitre link : CVE-2023-31222
CVE.ORG link : CVE-2023-31222
JSON object : View
Products Affected
medtronic
- paceart_optima
CWE
CWE-502
Deserialization of Untrusted Data