medium4.6
CVE-2018-8849
Medtronic N'Vision Clinician Programmer 8840 N'Vision Clinician Programme and 8870 N'Vision removable Application Card do not encrypt PII and PHI while at rest.
Impact
Medtronic N'Vision Clinician Programmer 8840 N'Vision Clinician Programme and 8870 N'Vision removable Application Card do not encrypt PII and PHI while at rest.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Medtronic | N\'Vision 8840 Firmware | All versions |
| Medtronic | N\'Vision 8870 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.medtronic.com/content/dam/medtronic-com/us-en/corporate/documents/Medtronic-NVision-8840_Security-Bulletin_FINAL.pdf
- http://www.securityfocus.com/bid/104213
- https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-137-01
- https://www.medtronic.com/security
- http://www.medtronic.com/content/dam/medtronic-com/us-en/corporate/documents/Medtronic-NVision-8840_Security-Bulletin_FINAL.pdf
- http://www.securityfocus.com/bid/104213
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-137-01