CVE-2018-10622

2018-08-1018:00:00

CWE-257

icscert

www.cve.org

AI Score

Confidence

High

EPSS

0.001

Percentile

32.8%

JSON

A vulnerability was discovered in all versions of Medtronic MyCareLink 24950 and 24952 Patient Monitor. The affected products use per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication and encryption of local data at rest.

CNA Affected

[
  {
    "product": "Medtronic MyCareLink 24950, 24952 Patient Monitor",
    "vendor": "ICS-CERT",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  }
]

References

www.securityfocus.com/bid/105042

ics-cert.us-cert.gov/advisories/ICSMA-18-219-01