CVE-2018-5448

2018-02-2700:00:00

CWE-23

icscert

www.cve.org

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.1%

JSON

All versions of the Medtronic 2090 Carelink Programmer are affected by a directory traversal vulnerability where the product’s software deployment network could allow an attacker to read files on the system.

CNA Affected

[
  {
    "product": "Medtronic 2090 CareLink Programmer",
    "vendor": "ICS-CERT",
    "versions": [
      {
        "status": "affected",
        "version": "All versions are affected."
      }
    ]
  }
]

References

ics-cert.us-cert.gov/advisories/ICSMA-18-058-01