PT-2018-14753 · Medtronic · Medtronic 2090 Carelink Programmer+2

Billy Rios + 1 · Publicado 2018-12-14 · Atualizado 2020-09-18 · CVE-2018-18984

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Medtronic CareLink 2090 Programmer versions (all versions) Medtronic CareLink 9790 Programmer versions (all versions) Medtronic Encore Programmer version 29901

Description The issue concerns the insufficient encryption of sensitive information, including personally identifiable information (PII) and protected health information (PHI), when the data is at rest.

Recommendations For Medtronic CareLink 2090 Programmer, consider implementing additional encryption measures to protect sensitive data. For Medtronic CareLink 9790 Programmer, consider implementing additional encryption measures to protect sensitive data. For Medtronic Encore Programmer version 29901, consider implementing additional encryption measures to protect sensitive data.

Correção

Missing Encryption of Sensitive Data

Cleartext Storage of Sensitive Information

Enumeração de Fraquezas

CWE-311

CWE-312

Identificadores relacionados

CVE-2018-18984

Produtos afetados

Medtronic 2090 Carelink Programmer

Medtronic Carelink 9790 Programmer

Medtronic Encore Programmer

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-18984 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-347-01 · Nota
• http://securityfocus.com/bid/106215 · Nota
• https://global.medtronic.com/xg-en/product-security/security-bulletins/carelink-9790-2090-29901.html · Nota