PT-2018-16963 · Medtronic · Medtronic 2090 Carelink Programmer

Publicado 2018-05-04 · Atualizado 2019-10-09 · CVE-2018-5448

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Média

Vetor base

AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Medtronic 2090 Carelink Programmer (affected versions not specified)

Description The issue concerns a directory traversal vulnerability. This vulnerability could allow an attacker to read files on the system by exploiting the product's software deployment network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Relative Path Traversal

Enumeração de Fraquezas

CWE-22

CWE-23

Identificadores relacionados

CVE-2018-5448

Produtos afetados

Medtronic 2090 Carelink Programmer

Referências · 4

• https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-5448 · Nota de Segurança
• https://cisa.gov/news-events/ics-medical-advisories/icsma-18-058-01 · Nota
• https://global.medtronic.com/xg-en/product-security/security-bulletins/carelink-2090-29901.html · Nota