Medtronic Micro Clinician and InterStim Apps
view advisory published 2023-03-06
Successful exploitation of this vulnerability could cause the clinician application’s custom password to be reset to default, resulting in unauthorized control of the clinician therapy application.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-25931US | medium6.8 | — | ||
Medtronic identified that the Pelvic Health clinician apps, which are installed on the Smart Programmer mobile device, have a password vulnerability that requires a security update… | ||||
02
references
External citations — patches, advisories, analysis.
- Recommended Practicesexternal
- ICS Advisory ICSMA-23-061-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSMA-23-061-01 Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- FixedInterStim X Clinician
An app update is available as of February 23, 2023 that will fix the vulnerability.
- FixedMicro Clinician
An app update is available as of February 23, 2023 that will fix the vulnerability.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan