CVE-2018-8870CWE-259

Medtronic MyCareLink Patient Monitor Use of Hard-coded Password

Medium · published July 2, 2018

CVSS v3.1
6.4
EPSS
0%
Percentile
28.8
In the wild
Unconfirmed
What it is

Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains a hard-coded operating system password. An attacker with physical access can remove the case of the device, connect to the debug port, and use the password to gain privileged access to the operating system.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00362 · 28.8th percentile
Weakness
CWE-259 · Use of Hard-coded Password
Published
2018-07-02T18:00Z
EPSS history
Timeline
  • 02 JUL 18:00Z
    Medtronic MyCareLink Patient Monitor Use of Hard-coded Password
    cvelistv5