Lucene search

[email protected]NVD:CVE-2018-18984

HistoryDec 14, 2018 - 3:29 p.m.

CVE-2018-18984

2018-12-1415:29:00

CWE-311

CWE-312

[email protected]

web.nvd.nist.gov

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.2%

JSON

Medtronic CareLink 2090 Programmer CareLink 9790 Programmer 29901 Encore Programmer, all versions, The affected products do not encrypt or do not sufficiently encrypt the following sensitive information while at rest PII and PHI.

Affected configurations

NVD

Node

medtroniccarelink_2090_programmer_firmware

AND

medtroniccarelink_2090_programmerMatch-

Node

medtroniccarelink_9790_programmerMatch-

AND

medtroniccarelink_9790_programmer_firmware

Node

medtronic29901_encore_programmerMatch-

AND

medtronic29901_encore_programmer_firmware

References

www.securityfocus.com/bid/106215

ics-cert.us-cert.gov/advisories/ICSMA-18-347-01

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.2%

JSON

Related for NVD:CVE-2018-18984

ics1 cve1 prion1 cvelist1