Back to feed
EUVD-2018-20457 · Published May 18, 2018
Medtronic N'Vision Clinician Programmer 8840 N'Vision Clinician Programme and 8870 N'Vision removable Application Card do not encrypt PII and PHI while at rest.
Technologies
Medtronic N\'Vision 8840Medtronic N\'Vision 8840 FirmwareMedtronic N\'Vision 8870Medtronic N\'Vision 8870 Firmware
Weaknesses
CWE-311
CVSS scores
- v3.14.6
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - v2.02.1
AV:L/AC:L/Au:N/C:P/I:N/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Privilege Escalation Credential Access Discovery Collection
References
- http://www.medtronic.com/content/dam/medtronic-com/us-en/corporate/documents/Medtronic-NVision-8840_Security-Bulletin_FINAL.pdf
- http://www.securityfocus.com/bid/104213
- https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-137-01
- https://www.medtronic.com/security
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-137-01
Potentially impacted assets
See if this affects your attack surface
