Browse CVEs

MEDIUM 6.8 CVE-2023-25931 Medtronic identified that the Pelvic Health clinician apps, which are installed on the Smart Programmer mobile device, have a password vulnerability … Interstim X Clinician Mitigation only Fix from $1,6002023-03-01 CRITICAL 9.8 CVE-2020-25187 Medtronic MyCareLink Smart 25000 is  vulnerable when an authenticated attacker runs a debug command, which can be sent to the patient reader and ca… Mycarelink Smart Model 25000 Firmware Mitigation only Fix from $2,3002020-12-14 HIGH 8.8 CVE-2020-25183 Medtronic MyCareLink Smart 25000 contains an authentication protocol vulnerability where the method used to authenticate between the MCL Smart Pati… Mycarelink Smart Model 25000 Firmware Mitigation only Fix from $1,9502020-12-14 HIGH 8.1 CVE-2020-27252 Medtronic MyCareLink Smart 25000 is vulnerable to a race condition in the MCL Smart Patient Reader software update system, which allows unsigned fi… Mycarelink Smart Model 25000 Firmware Mitigation only Fix from $1,9502020-12-14 HIGH 7.1 CVE-2019-10964 Medtronic MiniMed Insulin Pumps are designed to communicate using a wireless RF with other devices, such as blood glucose meters, glucose sensor tr… Minimed 508 Firmware Mitigation only Fix from $1,9502019-06-28 MEDIUM 6.5 CVE-2019-6540 The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 P… Mycarelink Monitor 24950 Firmware Mitigation only Fix from $1,6002019-03-26 MEDIUM 6.5 CVE-2019-6538 The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 P… Mycarelink Monitor Firmware Mitigation only Fix from $1,6002019-03-25 MEDIUM 5.2 CVE-2018-10622 Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for … Mycarelink 24952 Patient Monitor Firmware Mitigation only Fix from $1,6002018-08-10 MEDIUM 6.3 CVE-2018-10631 The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870 Applicatio… N\'vision 8840 Firmware Mitigation only Fix from $1,6002018-07-13 MEDIUM 6.4 CVE-2018-8870 Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains a hard-coded operating system password. An attacker with physical access can… 24950 Mycarelink Monitor Firmware Mitigation only Fix from $1,6002018-07-03 MEDIUM 6.2 CVE-2018-8868 Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains debug code meant to test the functionality of the monitor's communication in… 24950 Mycarelink Monitor Firmware Mitigation only Fix from $1,6002018-07-03 HIGH 7.1 CVE-2018-10596 Medtronic 2090 CareLink Programmer uses a virtual private network connection to securely download updates. It does not verify it is still connected… 2090 Carelink Programmer Firmware Mitigation only Fix from $1,9502018-07-03