Roche Diagnostics' vulnerability footprint centers on point-of-care diagnostic devices and their supporting firmware, including the Accu-Chek Inform II blood glucose meter and Cobas laboratory analyzers. The reported weakness classes span file-upload validation, permission assignment, and password-strength controls, reflecting the authentication and data-handling surfaces typical of networked medical instrumentation. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Roche Diagnostics over time
Of all the CVEs published by Roche Diagnostics as a CNA, 0.0% affect products that Roche Diagnostics develops as a vendor.
Of all the CVEs published that affect products developed by Roche Diagnostics, 0.0% are self-published by Roche Diagnostics as a CNA.
Signals from CVEs in this vendor scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-18563CRITICAL An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000), CoaguChek Pro II b | Nov 20, 2018 | 9.6 | 28 | NO | NO |
CVE-2018-18562HIGH An issue was discovered in Roche Accu-Chek Inform II Base Unit / Base Unit Hub before 03.01.04 and CoaguChek / cobas h232 Handheld Base Unit before 03.01.04. Weak access credential | Nov 20, 2018 | 8.8 | 26 | NO | NO |
CVE-2018-18561HIGH An issue was discovered in Roche Accu-Chek Inform II Base Unit / Base Unit Hub before 03.01.04 and CoaguChek / cobas h232 Handheld Base Unit before 03.01.04. Insecure permissions i | Nov 20, 2018 | 8.0 | 24 | NO | NO |
CVE-2018-18564HIGH An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000), CoaguChek Pro II b | Nov 20, 2018 | 7.4 | 23 | NO | NO |
CVE-2018-18565MEDIUM An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000), CoaguChek Pro II b | Nov 20, 2018 | 6.8 | 22 | NO | NO |
Signals from CVEs in this vendor scope (5 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Roche Diagnostics.
Media articles that mention a CVE ID that affects a product developed by Roche Diagnostics — matched by CVE ID, not by vendor name.