Design/Logic Flaw

Medtronic N'Vision Clinician Programmer 8840 N'Vision Clinician Programmer, all versions, and 8870 N'Vision removable Application Card, all versions. The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870...

CVE-2018-10631

The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870 Application Card and sufficient technical capability can modify the contents of this card, including the binary executables. If modified to bypass protection...

CVE-2018-10631

Summary (CVE-2018-10631) : The vulnerability affects Medtronic N’Vision Clinician Programmer 8840 and the 8870 removable Application Card. An attacker with physical access to the 8870 card and sufficient technical capability can modify the card’s contents, including binaries. If modified to bypas...

CVE-2018-10631 Medtronic N'Vision Clinician Programmer Protection Mechanism Failure

The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870 Application Card and sufficient technical capability can modify the contents of this card, including the binary executables. If modified to bypass protection...

CVE-2018-10631 Medtronic N'Vision Clinician Programmer Protection Mechanism Failure

The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870 Application Card and sufficient technical capability can modify the contents of this card, including the binary executables. If modified to bypass protection...

CVE-2018-10631: Protection Mechanism Failure

The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870 Application Card and sufficient technical capability can modify the contents of this card, including the binary executables. If modified to bypass protection...

CVE-2018-3687

Unquoted service paths in Intel Quartus II Programmer and Tools in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitrary code...

CVE-2018-3688

Unquoted service paths in Intel Quartus Prime Programmer and Tools in versions 15.1 - 18.0 allow a local attacker to potentially execute arbitrary code...

Code injection

Unquoted service paths in Intel Quartus Prime Programmer and Tools in versions 15.1 - 18.0 allow a local attacker to potentially execute arbitrary code...

CVE-2018-3687

Intel reports a Privilege Escalation/Vulnerability in the Intel Quartus family due to unquoted service paths. Affected: Quartus II v11.0–15.0; Quartus Prime v15.1–18.0; Intel Quartus II Programmer and Tools v11.0–15.0; Programmer and Tools v15.1–18.0. Root cause: unquoted service paths in the JTA...

CVE-2018-3688

CVE-2018-3688 refers to an unquoted service path vulnerability in Intel Quartus Prime Programmer and Tools, affecting Quartus Prime Programmer and Tools v15.1–18.0. The underlying issue enables a local attacker to potentially execute arbitrary code with elevated privileges by abusing the service ...

PT-2018-16124

Name of the Vulnerable Software and Affected Versions Intel Quartus II Programmer and Tools versions 11.0 through 15.0 Description The issue allows a local attacker to potentially execute arbitrary code due to unquoted service paths. Recommendations For versions 11.0 through 15.0, update to a...

CVE-2018-3687: Unquoted Search Path or Element

Unquoted service paths in Intel Quartus II Programmer and Tools in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitrary code...

CVE-2018-3688: Unquoted Search Path or Element

Unquoted service paths in Intel Quartus Prime Programmer and Tools in versions 15.1 - 18.0 allow a local attacker to potentially execute arbitrary code...

PT-2018-16125

Name of the Vulnerable Software and Affected Versions Intel Quartus Prime Programmer and Tools versions 15.1 through 18.0 Description The issue allows a local attacker to potentially execute arbitrary code due to unquoted service paths in the affected software. Recommendations For versions 15.1...

Medtronic 2090 CareLink Programmer Design Vulnerability

The Medtronic 2090 CareLink Programmer is a suite of portable computer products from Medtronic, Inc. The product is used to manage and program cardiac devices in the medical industry. A security vulnerability exists in all versions of the Medtronic 2090 CareLink Programmer in the affected product...

Code injection

Medtronic 2090 CareLink Programmer all versions The affected product uses a virtual private network connection to securely download updates. The product does not verify it is still connected to this virtual private network before downloading updates. An attacker with local network access to the...

CVE-2018-10596

CVE-2018-10596 affects the Medtronic 2090 CareLink Programmer (and 29901 Encore Programmer) where software downloads updates over a VPN-protected network via HTTP without verifying VPN persistence or update source. The root issue is improper restriction of communication channels to intended endpo...

PT-2018-9987

Name of the Vulnerable Software and Affected Versions: Medtronic 2090 CareLink Programmer all versions Description: The issue concerns the product's update process, which uses a virtual private network connection. However, it fails to verify if it is still connected to this network before...

CVE-2018-10596: Improper Restriction of Communication Channel to Intended Endpoints

Medtronic 2090 CareLink Programmer uses a virtual private network connection to securely download updates. It does not verify it is still connected to this virtual private network before downloading updates. The affected products initially establish an encapsulated IP-based VPN connection to a...