Medtronic 29901 Encore Programmer
4 CVEs affecting Medtronic 29901 Encore Programmer. Latest disclosed: 2018-12-14. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-10596 | High | 7.1 | 2018-07-03 | Medtronic 2090 CareLink Programmer uses a virtual private network connection to securely download updates. It does not verify it is still connected to this v… |
CVE-2018-5446 | Medium | 4.9 | 2018-05-04 | Medtronic 2090 CareLink Programmer uses a per-product username and password that is stored in a recoverable format. |
CVE-2018-5448 | Medium | 4.8 | 2018-05-04 | Medtronic 2090 CareLink Programmer’s software deployment network contains a directory traversal vulnerability that could allow an attacker to read files on the… |
CVE-2018-18984 | Medium | 4.6 | 2018-12-14 | Medtronic CareLink and Encore Programmers do not encrypt or do not sufficiently encrypt sensitive PII and PHI information while at rest . |