CVE-2018-8849CWE-311

Medtronic N'Vision Clinician Programmer Missing Encryption of Sensitive Data

Medium · published May 18, 2018

CVSS v3.1
4.6
EPSS
0%
Percentile
24.5
In the wild
Unconfirmed
What it is

Medtronic N'Vision Clinician Programmer 8840 N'Vision Clinician Programme and 8870 N'Vision removable Application Card do not encrypt PII and PHI while at rest.

The record
Technical detail
CVSS v3.1
4.6 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00326 · 24.5th percentile
Weakness
CWE-311 · Missing Encryption of Sensitive Data
Published
2018-05-18T13:00Z
EPSS history
Timeline
  • 18 MAY 13:00Z
    Medtronic N'Vision Clinician Programmer Missing Encryption of Sensitive Data
    cvelistv5