oM noM Security Feeds cve
vulnerability context

CVE-2023-31222

CVSS 9.8 CRITICALEPSS 98%CWE-502

Deserialization of untrusted data in Microsoft Messaging Queuing Service in Medtronic's Paceart Optima versions 1.11 and earlier on Windows allows an unauthorized user to impact a healthcare delivery organization’s Paceart Optima system cardiac device causing data to be deleted, stolen, or modified, or the Paceart Optima system being used for further network penetration via network connectivity.

Published 2023-06-29 · last modified 2026-06-17

details

CISA KEV status
Not in catalog
CVSS v3
9.8 / CRITICAL
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
98% percentile (score 0.2580)
CWE
CWE-502
OTX pulses
0 total, 0 recent

source mentions 1

source consensus

  • Bluesky:@cyberhub.blog
Want the 3-bullet summary of CVE-2023-31222, plus webhook alerts when KEV is updated? Pro is $10/mo.