Skip to content
CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2018-18984

Medtronic 9790, 2090 CareLink, and 29901 Encore Programmers Missing Encryption of Sensitive Data

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Medtronic CareLink and Encore Programmers do not encrypt or do not sufficiently encrypt sensitive PII and PHI information while at rest .

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Medtronic CareLink 9790 Programmer

Default version status: unaffected

  • All versionsaffected

Medtronic CareLink 2090 Programmer

Default version status: unaffected

  • All versionsaffected

Medtronic 29901 Encore Programmer

Default version status: unaffected

  • All versionsaffected

References