CVE:CVE-2018-18562
CNNVD:CNNVD-201811-115
Roche Accu-Chek Inform II Base Unit/Base Unit Hub和CoaguChek/cobas h232 Handheld Base Unit都是瑞士罗氏（Roche）公司的手持式血液检测医疗设备。
Roche Accu-Chek Inform II Base Unit/Base Unit Hub 03.01.04之前的版本和CoaguChek/cobas h232 Handheld Base Unit 03.01.04之前的版本中存在授权问题漏洞。攻击者可借助服务接口利用该漏洞获取未授权的访问权限。
solution:Upgrade roche accu-chek_inform_ii_firmware to a higher version than 03.01.04,and avoid the version (,03.01.04); Upgrade roche cobas_h_232_firmware to a higher version than 03.01.04,and avoid the version (,03.01.04); Upgrade roche coaguchek_firmware to a higher version than 03.01.04,and avoid the version (,03.01.04); Upgrade roche base_unit_hub_firmware to a higher version than 03.01.04,and avoid the version (,03.01.04)