Medtronic MyCareLink Patient Monitor
If exploited, these vulnerabilities may allow privileged access to the monitor 's operating system. However, physical access to the MyCareLink monitor is required. Additionally, these vulnerabilities may allow a MyCareLink monitor, when operated within close physical proximity of an implantable cardiac device, to read and write arbitrary memory values of that device.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-8870US | medium6.8OT elevated | — | ||
Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains a hard-coded operating system password. An attacker with physical access can remove the case of the device,… | ||||
| CVE-2018-8868US | medium6.4 | — | ||
Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains debug code meant to test the functionality of the monitor's communication interfaces, including the interfa… | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- Fixed24950 MyCareLink Monitor
Medtronic has released additional patient focused information, at the following location:
- Fixed24950 MyCareLink Monitor
Medtronic has released additional patient focused information, at the following location:
- Fixed24952 MyCareLink Monitor
Medtronic has released additional patient focused information, at the following location:
- Fixed24952 MyCareLink Monitor
Medtronic has released additional patient focused information, at the following location:
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan