CVE-2023-31222

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Deserialization of untrusted data in Microsoft Messaging Queuing Service in Medtronic's Paceart Optima versions 1.11 and earlier on Windows allows an unauthorized user to impact a healthcare delivery organization’s Paceart Optima system cardiac device causing data to be deleted, stolen, or modified, or the Paceart Optima system being used for further network penetration via network connectivity.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

No affected versions have been published.

Timeline

Published: Jun 29, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-312235.4Dradis before 4.8.0 allows persistent XSS by authenticated author users, related to avatars.CVE-2023-312249.8There is broken access control during authentication in Jamf Pro Server before 10.46.1.CVE-2023-312253.3The Gallery app has the risk of hijacking attacks. Successful exploitation of this vulnerability may cause download failures and affect prod CVE-2023-312267.5The SDK for the MediaPlaybackController module has improper permission verification. Successful exploitation of this vulnerability may affec CVE-2023-312277.5The hwPartsDFR module has a vulnerability in API calling verification. Successful exploitation of this vulnerability may affect device confi CVE-2023-312284.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.0 ver CVE-2023-312296.1URL Redirection to Untrusted Site ('Open Redirect') vulnerability in WP Directory Kit.This issue affects WP Directory Kit: from n/a through CVE-2023-312306.1Cross-Site Request Forgery (CSRF) vulnerability in Haoqisir Baidu Tongji generator allows Stored XSS.This issue affects Baidu Tongji generat CVE-2023-312316.5Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, CVE-2023-312324.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David Artiss Plugins List plugin <= 2.5 versions.CVE-2023-312334.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Haoqisir Baidu Tongji generator plugin <= 1.0.2 versions.CVE-2023-312346.3Missing Authorization vulnerability in Tilda Publishing.This issue affects Tilda Publishing: from n/a through 0.3.23.