Medtronic MyCareLink Patient Monitor
If exploited, these vulnerabilities may allow privileged access to the monitor 's operating system. However, physical access to the MyCareLink monitor is required. Additionally, these vulnerabilities may allow a MyCareLink monitor, when operated within close physical proximity of an implantable cardiac device, to read and write arbitrary memory values of that device.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-8870US | medium6.8OT erhöht | — | ||
Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains a hard-coded operating system password. An attacker with physical access can remove the case of the device,… | ||||
| CVE-2018-8868US | medium6.4 | — | ||
Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains debug code meant to test the functionality of the monitor's communication interfaces, including the interfa… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (4)
- Behoben24950 MyCareLink Monitor
Medtronic has released additional patient focused information, at the following location:
- Behoben24950 MyCareLink Monitor
Medtronic has released additional patient focused information, at the following location:
- Behoben24952 MyCareLink Monitor
Medtronic has released additional patient focused information, at the following location:
- Behoben24952 MyCareLink Monitor
Medtronic has released additional patient focused information, at the following location:
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan