ICSMA-23-061-01

icsaUScisa_csaf_ot

Medtronic Micro Clinician and InterStim Apps

Advisory ansehen veröffentlicht 2023-03-06

Successful exploitation of this vulnerability could cause the clinician application’s custom password to be reset to default, resulting in unauthorized control of the clinician therapy application.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2023-25931USmedium6.8—
Medtronic identified that the Pelvic Health clinician apps, which are installed on the Smart Programmer mobile device, have a password vulnerability that requires a security update…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (2)

  • BehobenInterStim X Clinician

    An app update is available as of February 23, 2023 that will fix the vulnerability.

  • BehobenMicro Clinician

    An app update is available as of February 23, 2023 that will fix the vulnerability.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan