Vulnerabilities > Medtronic

DATE CVE VULNERABILITY TITLE RISK
2018-07-03 CVE-2018-10596 Information Exposure vulnerability in Medtronic 2090 Carelink Programmer Firmware
Medtronic 2090 CareLink Programmer all versions The affected product uses a virtual private network connection to securely download updates.
low complexity
medtronic CWE-200
5.2
2018-05-18 CVE-2018-8849 Missing Encryption of Sensitive Data vulnerability in Medtronic N'Vision 8840 Firmware and N'Vision 8870 Firmware
Medtronic N'Vision Clinician Programmer 8840 N'Vision Clinician Programmer, all versions, and 8870 N'Vision removable Application Card, all versions does not encrypt PII and PHI while at rest.
local
low complexity
medtronic CWE-311
2.1
2018-05-04 CVE-2018-5448 Path Traversal vulnerability in Medtronic 2090 Carelink Programmer Firmware
All versions of the Medtronic 2090 Carelink Programmer are affected by a directory traversal vulnerability where the product's software deployment network could allow an attacker to read files on the system.
low complexity
medtronic CWE-22
2.7
2018-05-04 CVE-2018-5446 Insufficiently Protected Credentials vulnerability in Medtronic 2090 Carelink Programmer Firmware
All versions of the Medtronic 2090 Carelink Programmer are affected by a per-product username and password that is stored in a recoverable format which could allow an attacker with physical access to a 2090 Programmer to obtain per-product credentials to the software deployment network.
local
low complexity
medtronic CWE-522
2.1
2011-09-02 CVE-2011-3386 Unspecified vulnerability in Medtronic Paradigm Wireless Insulin Pump
Unspecified vulnerability in Medtronic Paradigm wireless insulin pump 512, 522, 712, and 722 allows remote attackers to modify the delivery of an insulin bolus dose and cause a denial of service (adverse human health effects) via unspecified vectors involving wireless communications and knowledge of the device's serial number, as demonstrated by Jerome Radcliffe at the Black Hat USA conference in August 2011.
network
high complexity
medtronic
4.0