Vulnerabilities

TI-2018-07485 CVE-2018-10596 · GHSA-3vcw-xhqc-97mh

Medtronic 2090 Carelink Programmer Improper Restriction of Communication Channel to Intended Endpoints

LOW 34

Medtronic 2090 CareLink Programmer uses a virtual private network connection to securely download updates.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.0133 Published 2018-07-02 No fix listed CWE-923

TI-2018-03961 CVE-2018-5448 · GHSA-h435-fgp5-q25r

Medtronic 2090 Carelink Programmer Relative Path Traversal

LOW 23

Medtronic 2090 CareLink Programmer’s software deployment network contains a directory traversal vulnerability that could allow an attacker to read files on the system.

CVSS 3.1MEDIUM 4.8 Adjacent network Low privileges No interaction EPSS 0.0073 Published 2018-05-04 No fix listed CWE-23

TI-2018-03959 CVE-2018-5446 · GHSA-7gxh-p4c9-cq3r

Medtronic 2090 Carelink Programmer Storing Passwords in a Recoverable Format

LOW 23

Medtronic 2090 CareLink Programmer uses a per-product username and password that is stored in a recoverable format.

CVSS 3.1MEDIUM 4.9 Physical No auth No interaction EPSS 0.00385 Published 2018-05-04 No fix listed CWE-257

Vulnerabilities

Filters

Medtronic 2090 Carelink Programmer Improper Restriction of Communication Channel to Intended Endpoints

Medtronic 2090 Carelink Programmer Relative Path Traversal

Medtronic 2090 Carelink Programmer Storing Passwords in a Recoverable Format