PT-2018-16963 · Medtronic · Medtronic 2090 Carelink Programmer

Published 2018-05-04 · Updated 2019-10-09 · CVE-2018-5448

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Medtronic 2090 Carelink Programmer (affected versions not specified)

Description The issue concerns a directory traversal vulnerability. This vulnerability could allow an attacker to read files on the system by exploiting the product's software deployment network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Relative Path Traversal

Weakness Enumeration

CWE-22

CWE-23

Related Identifiers

CVE-2018-5448

Affected Products

Medtronic 2090 Carelink Programmer

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-5448 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-01 · Note
• https://cisa.gov/news-events/ics-medical-advisories/icsma-18-058-01 · Note
• https://global.medtronic.com/xg-en/product-security/security-bulletins/carelink-2090-29901.html · Note