7 matches found
CVE-2018-10596: Improper Restriction of Communication Channel to Intended Endpoints
Medtronic 2090 CareLink Programmer uses a virtual private network connection to securely download updates. It does not verify it is still connected to this virtual private network before downloading updates. The affected products initially establish an encapsulated IP-based VPN connection to a...
PT-2018-9987
Name of the Vulnerable Software and Affected Versions: Medtronic 2090 CareLink Programmer all versions Description: The issue concerns the product's update process, which uses a virtual private network connection. However, it fails to verify if it is still connected to this network before...
CVE-2018-5446
Medtronic 2090 CareLink Programmer uses a per-product username and password that is stored in a recoverable format...
CVE-2018-5446 Medtronic 2090 Carelink Programmer Storing Passwords in a Recoverable Format
Medtronic 2090 CareLink Programmer uses a per-product username and password that is stored in a recoverable format...
PT-2018-16962
Name of the Vulnerable Software and Affected Versions Medtronic 2090 Carelink Programmer affected versions not specified Description The issue concerns a per-product username and password stored in a recoverable format. This could allow an attacker with physical access to the programmer to obtain...
PT-2018-16963
Name of the Vulnerable Software and Affected Versions Medtronic 2090 Carelink Programmer affected versions not specified Description The issue concerns a directory traversal vulnerability. This vulnerability could allow an attacker to read files on the system by exploiting the product's software...