Vulnerabilities > Medtronic > Mycarelink 24952 Patient Monitor Firmware

DATE CVE VULNERABILITY TITLE RISK
2018-08-10 CVE-2018-10626 Insufficient Verification of Data Authenticity vulnerability in Medtronic products
Medtronic MyCareLink Patient Monitor’s update service does not sufficiently verify the authenticity of the data uploaded.
high complexity
medtronic CWE-345
4.4
2018-08-10 CVE-2018-10622 Insufficiently Protected Credentials vulnerability in Medtronic products
Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format.
high complexity
medtronic CWE-522
7.1