CVE-2020-25187

2020-12-1419:18:52

CWE-122

icscert

www.cve.org

9.7 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.5%

JSON

Medtronic MyCareLink Smart 25000 all versions are vulnerable when an attacker who gains auth runs a debug command, which is sent to the reader causing heap overflow in the MCL Smart Reader stack. A heap overflow allows attacker to remotely execute code on the MCL Smart Reader, could lead to control of device.

CNA Affected

[
  {
    "product": "Medtronic MyCareLink Smart 25000 Reader",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Smart 25000 all versions"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsma-20-345-01