CVE-2018-18984

🗓️ 14 Dec 2018 15:00:00Reported by icscertType

Medtronic CareLink 2090 Programmer does not encrypt PII and PHI at rest

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2018-18984 Medtronic 9790, 2090 CareLink, and 29901 Encore Programmers Missing Encryption of Sensitive Data	14 Dec 201815:00	–	cvelist
EUVD	EUVD-2018-10688	7 Oct 202500:30	–	euvd
ICS	Medtronic 9790, 2090 CareLink, and 29901 Encore Programmers	13 Dec 201800:00	–	ics
NVD	CVE-2018-18984	14 Dec 201815:29	–	nvd
Prion	Information disclosure	14 Dec 201815:29	–	prion

NVD

Vulners

Node

medtronic carelink_2090_programmer_firmware

AND

medtronic carelink_2090_programmerMatch-

Node

medtronic carelink_9790_programmer_firmware

AND

medtronic carelink_9790_programmerMatch-

Node

medtronic 29901_encore_programmer_firmware

AND

medtronic 29901_encore_programmerMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "CareLink 9790 Programmer",
    "vendor": "Medtronic",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CareLink 2090 Programmer",
    "vendor": "Medtronic",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "29901 Encore Programmer",
    "vendor": "Medtronic",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  }
]

Source	Link
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSMA-18-347-01
securityfocus	www.securityfocus.com/bid/106215
global	www.global.medtronic.com/xg-en/product-security/security-bulletins/carelink-9790-2090-29901.html

22 May 2025 17:15Current

4.7Medium risk

Vulners AI Score4.7

CVSS 22.1

CVSS 3.14.6

EPSS0.00084