CVE-2018-10626
Medium
Description
Medtronic MyCareLink Patient Monitor’s update service does not sufficiently verify the authenticity of the data uploaded. An attacker who obtains per-product credentials from the monitor and paired implantable cardiac device information can potentially upload invalid data to the Medtronic CareLink network.
SeverityMedium
CVSS4.4
Exploit probability—
ProductMedtronic Mycarelink 24952 Patient Monitor Firmware
PublishedAug 10, 2018
First seenAug 10, 2018
Weakness typeCWE-345CWE-345
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| medtronic mycarelink_24952_patient_monitor_firmware | No range specified | — |
| medtronic mycarelink_24950_patient_monitor_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.