PT-2020-16000
CVE-2020-25183
·
تاريخ النشر
2020-12-14
·
تاريخ التحديث
2020-12-15
الوصف من
CVSS 3.1
8.0
عاليةالمقاييسAV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Medtronic MyCareLink Smart 25000 all versions
Description
The authentication protocol used between the MCL Smart Patient Reader and the MyCareLink Smart mobile app is vulnerable to bypass. This issue allows an attacker to use another mobile device or a malicious app on a smartphone to authenticate to the patient's Smart Reader, making the device believe it is communicating with the actual smartphone application when executed within Bluetooth range.
Recommendations
For Medtronic MyCareLink Smart 25000 all versions: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾