PT-2018-14753
CVE-2018-18984
·
Published
2018-12-14
·
Updated
2020-09-18
Description by
CVSS 2.0
2.1
LowMetricsAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Medtronic CareLink 2090 Programmer versions (all versions)
Medtronic CareLink 9790 Programmer versions (all versions)
Medtronic Encore Programmer version 29901
Description
The issue concerns the insufficient encryption of sensitive information, including personally identifiable information (PII) and protected health information (PHI), when the data is at rest.
Recommendations
For Medtronic CareLink 2090 Programmer, consider implementing additional encryption measures to protect sensitive data.
For Medtronic CareLink 9790 Programmer, consider implementing additional encryption measures to protect sensitive data.
For Medtronic Encore Programmer version 29901, consider implementing additional encryption measures to protect sensitive data.
Found an issue in the description? Have something to add? Feel free to write us 👾