Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2018-05-04	CVE-2018-5448	Path Traversal vulnerability in Medtronic 2090 Carelink Programmer Firmware Medtronic 2090 CareLink Programmer’s software deployment network contains a directory traversal vulnerability that could allow an attacker to read files on the system. low complexity medtronic CWE-22	5.7
2018-05-04	CVE-2018-5446	Insufficiently Protected Credentials vulnerability in Medtronic 2090 Carelink Programmer Firmware Medtronic 2090 CareLink Programmer uses a per-product username and password that is stored in a recoverable format. low complexity medtronic CWE-522	5.3