CVE-2018-10596
mediumPriorität · verfolgen · 32EPSS 0.013 · 71. PerzentilEUUSEPSS · bewertet 2026-10-26
Medtronic 2090 CareLink Programmer uses a virtual private network connection to securely download updates. It does not verify it is still connected to this virtual private network before downloading updates. The affected products initially establish an encapsulated IP-based VPN connection to a Medtronic-hosted update network. Once the VPN is established, it makes a request to a HTTP (non-TLS) server across the VPN for updates, which responds and provides any available updates. The programmer-side (client) service responsible for this HTTP request does not check to ensure it is still connected to the VPN before making the HTTP request. Thus, an attacker could cause the VPN connection to terminate (through various methods and attack points) and intercept the HTTP request, responding with malicious updates via a man-in-the-middle attack. The affected products do not verify the origin or integrity of these updates, as it insufficiently relied on the security of the VPN. An attacker with remote network access to the programmer could influence these communications.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- Behoben2090 CareLink Programmercisa_csaf_ot
After additional review and risk evaluation of the affected products, Medtronic has disabled the network-based software update mechanism, including both the VPN and the HTTP subservices, as an immediate security mitigation. Users should not attempt to update the affected products over the network as this update mechanism is vulnerable to the attack described in section 4.2.3. Medtronic will continue to implement and deploy increased security protections and mitigations to address the vulnerabilities in this advisory.
- Behoben29901 Encore Programmercisa_csaf_ot
After additional review and risk evaluation of the affected products, Medtronic has disabled the network-based software update mechanism, including both the VPN and the HTTP subservices, as an immediate security mitigation. Users should not attempt to update the affected products over the network as this update mechanism is vulnerable to the attack described in section 4.2.3. Medtronic will continue to implement and deploy increased security protections and mitigations to address the vulnerabilities in this advisory.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5.2–8
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (7)
Betroffene Produkte und Versionsbereiche.
- medtronic 2090 carelink programmer firmwarealle VersionennvdUScpe:2.3:o:medtronic:2090_carelink_programmer_firmware:*:*:*:*:*:*:*:*
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSMA-18-058-01Medtronic 2090 Carelink Programmer Vulnerabilities (Update C)2018-02-27icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities may allow an attacker with physical access to a 2090 Programmer to obtain per-product credentials to the software deployment network. These credentials grant access to the software deployment network, but access is limited to read-only versions of device software applications.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (10)
Externe Belege — Patches, Meldungen, Analysen.
- http://www.nsfocus.net/vulndb/47493cnnvd
- https://global.medtronic.com/xg-en/product-security/security-bulletins/carelink-2090-29901.htmlcnnvd
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-01cnnvd
- https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-058-01cnnvd
- https://www.us-cert.gov/ics/advisories/ICSMA-18-058-01cnnvd
- https://global.medtronic.com/xg-en/product-security/security-bulletins/carelink-2090-29901.htmlenisa_euvd
- https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-058-01enisa_euvd
- https://global.medtronic.com/xg-en/product-security/security-bulletins/carelink-2090-29901.htmlnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan