PT-2018-14753

CVE-2018-18984

Publicado

2018-12-14

Atualizado

2020-09-18

Descrição por

CVSS 2.0

2.1

Baixa

MétricasAV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Medtronic CareLink 2090 Programmer versions (all versions) Medtronic CareLink 9790 Programmer versions (all versions) Medtronic Encore Programmer version 29901

Description The issue concerns the insufficient encryption of sensitive information, including personally identifiable information (PII) and protected health information (PHI), when the data is at rest.

Recommendations For Medtronic CareLink 2090 Programmer, consider implementing additional encryption measures to protect sensitive data. For Medtronic CareLink 9790 Programmer, consider implementing additional encryption measures to protect sensitive data. For Medtronic Encore Programmer version 29901, consider implementing additional encryption measures to protect sensitive data.

Explorabilidade

Correção

Impactos

Pesquisadores

Billy Rios

Jonathan Butts

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-311: Missing Encryption of Sensitive Data

CWE-312: Cleartext Storage of Sensitive Information

Identificadores relacionados