medium4.6
CVE-2018-18984
Medtronic CareLink and Encore Programmers do not encrypt or do not sufficiently encrypt sensitive PII and PHI information while at rest .
Impact
Medtronic CareLink and Encore Programmers do not encrypt or do not sufficiently encrypt sensitive PII and PHI information while at rest .
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Medtronic | Carelink 2090 Programmer Firmware | All versions |
| Medtronic | Carelink 9790 Programmer Firmware | All versions |
| Medtronic | 29901 Encore Programmer Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/106215
- https://global.medtronic.com/xg-en/product-security/security-bulletins/carelink-9790-2090-29901.html
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-347-01
- http://www.securityfocus.com/bid/106215
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-347-01