Read the docs

Medtronic

Records35All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

Medtronic records in CISA KEV

No Medtronic vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Carelink Network 4 records MEDIUM Valleylab Ft10 Energy Platform Firmware 4 records LOW 2090 Carelink Programmer Firmware 3 records LOW Mycarelink Smart Model 25000 Firmware 3 records MEDIUM 24950 Mycarelink Monitor Firmware 2 records LOW 24952 Mycarelink Monitor Firmware 2 records LOW Amplia Crt-d Firmware 2 records MEDIUM Carelink 2090 Firmware 2 records MEDIUM

Records

3 records in Mycarelink Smart Model 25000 Firmware · all components

TI-2020-15429 CVE-2020-25187 · GHSA-4m4f-3m29-78r8

Medtronic MyCareLink Smart Heap-based Buffer Overflow

Priority MEDIUM 49

Medtronic MyCareLink Smart 25000 is vulnerable when an authenticated attacker runs a debug command, which can be sent to the patient reader and cause a heap overflow event within the MCL Smart Patient Reader software sta…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03931 Published 2020-12-14 No fix listed CWE-122
TI-2020-16578 CVE-2020-27252 · GHSA-qmhj-wg3r-x2h5

Medtronic MyCareLink Smart Time-of-check Time-of-use Race Condition

Priority MEDIUM 45

Medtronic MyCareLink Smart 25000 is vulnerable to a race condition in the MCL Smart Patient Reader software update system, which allows unsigned firmware to be uploaded and executed on the Patient Reader.

CVSS 3.1HIGH 8.8 Adjacent network No auth User interaction EPSS 0.0384 Published 2020-12-14 No fix listed CWE-367
TI-2020-15425 CVE-2020-25183 · GHSA-7j5v-9v3j-phg6

Medtronic MyCareLink Smart Improper Authentication

Priority LOW 39

Medtronic MyCareLink Smart 25000 contains an authentication protocol vulnerability where the method used to authenticate between the MCL Smart Patient Reader and the Medtronic MyCareLink Smart mobile app is vulnerable to…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00796 Published 2020-12-14 No fix listed CWE-287
Open these records in search →