Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Medtronic Component: Mycarelink Smart Model 25000 Firmware Clear all filters
TI-2020-16578 CVE-2020-27252 · GHSA-qmhj-wg3r-x2h5

Medtronic MyCareLink Smart Time-of-check Time-of-use Race Condition

Priority MEDIUM 45

Medtronic MyCareLink Smart 25000 is vulnerable to a race condition in the MCL Smart Patient Reader software update system, which allows unsigned firmware to be uploaded and executed on the Patient Reader.

CVSS 3.1HIGH 8.8 Adjacent network No auth User interaction EPSS 0.0384 Published 2020-12-14 No fix listed CWE-367
TI-2020-15429 CVE-2020-25187 · GHSA-4m4f-3m29-78r8

Medtronic MyCareLink Smart Heap-based Buffer Overflow

Priority MEDIUM 49

Medtronic MyCareLink Smart 25000 is vulnerable when an authenticated attacker runs a debug command, which can be sent to the patient reader and cause a heap overflow event within the MCL Smart Patient Reader software sta…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03931 Published 2020-12-14 No fix listed CWE-122
TI-2020-15425 CVE-2020-25183 · GHSA-7j5v-9v3j-phg6

Medtronic MyCareLink Smart Improper Authentication

Priority LOW 39

Medtronic MyCareLink Smart 25000 contains an authentication protocol vulnerability where the method used to authenticate between the MCL Smart Patient Reader and the Medtronic MyCareLink Smart mobile app is vulnerable to…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00796 Published 2020-12-14 No fix listed CWE-287