PT-2018-18662 · Medtronic · Medtronic N'Vision Removable Application Card 8870+1

Billy Rios + 1 · Publicado 2018-05-18 · Atualizado 2025-06-27 · CVE-2018-8849

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Medtronic N'Vision Clinician Programmer 8840 all versions Medtronic N'Vision removable Application Card 8870 all versions

Description The issue concerns the lack of encryption for personally identifiable information (PII) and protected health information (PHI) when the data is at rest.

Recommendations For Medtronic N'Vision Clinician Programmer 8840 all versions, consider implementing additional encryption measures to protect PII and PHI at rest. For Medtronic N'Vision removable Application Card 8870 all versions, consider implementing additional encryption measures to protect PII and PHI at rest.

Correção

Missing Encryption of Sensitive Data

Enumeração de Fraquezas

CWE-311

Identificadores relacionados

CVE-2018-8849

Produtos afetados

Medtronic N'Vision Clinician Programmer 8840

Medtronic N'Vision Removable Application Card 8870

Referências · 7

• http://securityfocus.com/bid/104213 · Nota
• https://medtronic.com/security · Nota
• https://t.me/cvenotify/126913 · Publicação no Telegram
• https://cisa.gov/news-events/ics-medical-advisories/icsma-18-137-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-8849 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-137-01 · Nota
• http://medtronic.com/content/dam/medtronic-com/us-en/corporate/documents/Medtronic-NVision-8840_Security-Bulletin_FINAL.pdf · Aviso do Fabricante