9 matches found
CVE-2018-10596: Improper Restriction of Communication Channel to Intended Endpoints
Medtronic 2090 CareLink Programmer uses a virtual private network connection to securely download updates. It does not verify it is still connected to this virtual private network before downloading updates. The affected products initially establish an encapsulated IP-based VPN connection to a...
PT-2018-9987
Name of the Vulnerable Software and Affected Versions: Medtronic 2090 CareLink Programmer all versions Description: The issue concerns the product's update process, which uses a virtual private network connection. However, it fails to verify if it is still connected to this network before...
CVE-2018-5446
Medtronic 2090 CareLink Programmer uses a per-product username and password that is stored in a recoverable format...
CVE-2018-5446
CVE-2018-5446 affects Medtronic CareLink programmers (2090 CareLink Programmer and 29901 Encore Programmer). The flaw arises from passwords stored in a recoverable format, enabling credential exposure when physical access is present. ICS-CERT advisory and subsequent updates document a CVSS v3 bas...
CVE-2018-5448
CVE-2018-5448 affects Medtronic 2090 CareLink Programmer and 29901 Encore Programmer via the CareLink SDN. The vulnerability is a relative path traversal in the software deployment network that could allow an attacker to read files on the system. ICS-CERT advisory Update C/Update B describes this...
CVE-2018-5446 Medtronic 2090 Carelink Programmer Storing Passwords in a Recoverable Format
Medtronic 2090 CareLink Programmer uses a per-product username and password that is stored in a recoverable format...
PT-2018-16962
Name of the Vulnerable Software and Affected Versions Medtronic 2090 Carelink Programmer affected versions not specified Description The issue concerns a per-product username and password stored in a recoverable format. This could allow an attacker with physical access to the programmer to obtain...
PT-2018-16963
Name of the Vulnerable Software and Affected Versions Medtronic 2090 Carelink Programmer affected versions not specified Description The issue concerns a directory traversal vulnerability. This vulnerability could allow an attacker to read files on the system by exploiting the product's software...