CVE-2018-10622

Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication...

Authentication flaw

A vulnerability was discovered in all versions of Medtronic MyCareLink 24950 and 24952 Patient Monitor. The affected products use per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication and encryption of local data at rest...

CVE-2018-10622

Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication...

CVE-2018-10626

Medtronic MyCareLink Patient Monitor’s update service does not sufficiently verify the authenticity of the data uploaded. An attacker who obtains per-product credentials from the monitor and paired implantable cardiac device information can potentially upload invalid data to the Medtronic CareLin...

CVE-2018-10622

The CVE-2018-10622 issue affects Medtronic MyCareLink Patient Monitor models 24950/24952, where per-product credentials are stored in a recoverable format. This allows an attacker with physical access to obtain credentials and use them for network authentication and encryption of data at rest. Th...

CVE-2018-10626

Medtronic MyCareLink 24950/24952 Patient Monitors are affected by CVE-2018-10626: the update service does not sufficiently verify data authenticity, enabling an attacker with per‑product credentials to upload invalid data to the CareLink network (CWE-345). Connected advisories corroborate affecte...

CVE-2018-10622 Medtronic MyCareLink Patient Monitor Network Credential Weakness

Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication...

CVE-2018-10626 Medtronic MyCareLink 24950 Patient Monitor Insufficient Verification of Data Authenticity

Medtronic MyCareLink Patient Monitor’s update service does not sufficiently verify the authenticity of the data uploaded. An attacker who obtains per-product credentials from the monitor and paired implantable cardiac device information can potentially upload invalid data to the Medtronic CareLin...

CVE-2018-10626: Insufficient Verification of Data Authenticity

Medtronic MyCareLink Patient Monitor’s update service does not sufficiently verify the authenticity of the data uploaded. An attacker who obtains per-product credentials from the monitor and paired implantable cardiac device information can potentially upload invalid data to the Medtronic CareLin...

CVE-2018-10622: Cleartext Storage in a File or on Disk

Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication...

MySQL Enterprise Monitor 3.3.x < 3.3.9.3339 / 3.4.x < 3.4.7.4296 / 4.0.x < 4.0.4.5233 Multiple Vulnerabilities (April 2018 CPU)

According to its self-reported version, the MySQL Enterprise Monitor application running on the remote host is 3.3.x prior to 3.3.9.3339 or 3.4.x prior to 3.4.7.4296 or 4.0.x prior to 4.0.4.5233. It is, therefore, affected by multiple vulnerabilities as noted in the April 2018 Critical Patch Upda...

[SECURITY] Fedora 28 Update: libcgroup-0.41-20.fc28

Control groups infrastructure. The library helps manipulate, control, administrate and monitor control groups and the associated controllers...

Medtronic MyCareLink 24950 Patient Monitor and 24952 Patient Monitor Information Disclosure Vulnerability

The Medtronic MyCareLink 24950 Patient Monitor and 24952 Patient Monitor are both monitor devices from Medtronic, Inc. that are used to monitor a patient's vital signs. An information disclosure vulnerability exists in the Medtronic MyCareLink 24950 Patient Monitor and 24952 Patient Monitor all...

Remote Control Command Vulnerability in omron PLC SYSMAC CP1L

The omron PLC SYSMAC CP1L is a PLC from Omron. A remote control command vulnerability exists in the omron PLC SYSMAC CP1L, which can be exploited by an attacker to switch the PLC to monitor mode and then set and force writes to the PLC, as well as operate I/O points and auxiliary relays, and modi...

MySQL Enterprise Monitor 3.4.x < 3.4.8 / 4.0.x < 4.0.5 / 8.0.x < 8.0.1 Multiple Vulnerabilities (July 2018 CPU)

According to its self-reported version, the MySQL Enterprise Monitor application running on the remote host is 3.4.x prior to 3.4.8, or 4.0.x prior to 4.0.5, or 8.0.x prior to 8.0.1. It is, therefore, affected by multiple vulnerabilities as noted in the July 2018 Critical Patch Update advisory...

Medtronic MyCareLink 24950 Patient Monitor (Update A)

1. EXECUTIVE SUMMARY CVSS v3 4.9 Vendor: Medtronic Equipment: MyCareLink Patient Monitor Vulnerabilities: Insufficient Verification of Data Authenticity, Storing Passwords in a Recoverable Format 2. RISK EVALUATION Successful exploitation of these vulnerabilities may allow an attacker with...

PT-2018-1431

Name of the Vulnerable Software and Affected Versions Medtronic MyCareLink Patient Monitor versions 24950 and 24952 Description The issue is related to insufficient data authentication in the Medtronic MyCareLink Patient Monitor. This could allow a remote attacker to upload arbitrary information ...

PT-2018-1432

Name of the Vulnerable Software and Affected Versions Medtronic MyCareLink Patient Monitor versions affected versions not specified Description A vulnerability was discovered in Medtronic MyCareLink Patient Monitor, where per-product credentials are stored in a recoverable format. This allows an...

CVE-2018-7059

Aruba ClearPass prior to 6.6.9 has a vulnerability in the API that helps to coordinate cluster actions. An authenticated user with the "mon" permission could use this vulnerability to obtain cluster credentials which could allow privilege escalation. This vulnerability is only present when...

Unable to un-check the "Disable display scaling on high DPI settings" for Citrix Desktop Viewer

Citrix Desktop Viewer is unable to reach the correct resolution of a 4k monitor. Max resolution by the monitor is 3840 x 2160 but when launched Desktop Viewer is able to reach only 2560 x 1440. Changing the High DPI settings to use the native resolution Advanced High DPI, Select "No, use native...