PT-2018-18662 · Medtronic · Medtronic N'Vision Removable Application Card 8870+1

Billy Rios + 1 · Published 2018-05-18 · Updated 2025-06-27 · CVE-2018-8849

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Medtronic N'Vision Clinician Programmer 8840 all versions Medtronic N'Vision removable Application Card 8870 all versions

Description The issue concerns the lack of encryption for personally identifiable information (PII) and protected health information (PHI) when the data is at rest.

Recommendations For Medtronic N'Vision Clinician Programmer 8840 all versions, consider implementing additional encryption measures to protect PII and PHI at rest. For Medtronic N'Vision removable Application Card 8870 all versions, consider implementing additional encryption measures to protect PII and PHI at rest.

Fix

Missing Encryption of Sensitive Data

Weakness Enumeration

CWE-311

Related Identifiers

CVE-2018-8849

Affected Products

Medtronic N'Vision Clinician Programmer 8840

Medtronic N'Vision Removable Application Card 8870

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2018-8849 · Security Note
• http://medtronic.com/content/dam/medtronic-com/us-en/corporate/documents/Medtronic-NVision-8840_Security-Bulletin_FINAL.pdf · Vendor Advisory
• http://securityfocus.com/bid/104213 · Note
• https://medtronic.com/security · Note
• https://t.me/cvenotify/126913 · Telegram Post
• https://cisa.gov/news-events/ics-medical-advisories/icsma-18-137-01 · Note
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-137-01 · Note