Vulnerability Details CVE-2018-10622
Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication and encryption of local data at rest.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 18.8%
CVSS Severity
CVSS v3 Score 7.1
CVSS v2 Score 1.9
References
Products affected by CVE-2018-10622
-
cpe:2.3:h:medtronic:mycarelink_24950_patient_monitor:-
-
cpe:2.3:h:medtronic:mycarelink_24952_patient_monitor:-
-
cpe:2.3:o:medtronic:mycarelink_24950_patient_monitor_firmware:-
-
cpe:2.3:o:medtronic:mycarelink_24952_patient_monitor_firmware:-