Vulnerabilities > CVE-2023-31222 - Deserialization of Untrusted Data vulnerability in Medtronic Paceart Optima 1.11

047910
CVSS 8.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
medtronic
CWE-502

Summary

Deserialization of untrusted data in Microsoft Messaging Queuing Service in Medtronic's Paceart Optima versions 1.11 and earlier on Windows allows an unauthorized user to impact a healthcare delivery organization’s Paceart Optima system cardiac device causing data to be deleted, stolen, or modified, or the Paceart Optima system being used for further network penetration via network connectivity.

Vulnerable Configurations

Part Description Count
Application
Medtronic
2

Common Weakness Enumeration (CWE)