CVE-2018-10626CWE-345
Medtronic MyCareLink 24950 Patient Monitor Insufficient Verification of Data Authenticity
Medium · published August 10, 2018
What it is
Medtronic MyCareLink Patient Monitor’s update service does not sufficiently verify the authenticity of the data uploaded. An
attacker who obtains per-product credentials from the monitor and paired
implantable cardiac device information can potentially upload invalid
data to the Medtronic CareLink network.
The record
Technical detail
- CVSS v3.1
- 4.4 · MEDIUM
- Vector
- CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00361 · 28.8th percentile
- Weakness
- CWE-345 · Insufficient Verification of Data Authenticity
- Published
- 2018-08-10T18:00Z
EPSS history
Timeline