Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2018-8870

Medtronic MyCareLink Patient Monitor Use of Hard-coded Password

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains a hard-coded operating system password. An attacker with physical access can remove the case of the device, connect to the debug port, and use the password to gain privileged access to the operating system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Medtronic 24950 MyCareLink Monitor

Default version status: unaffected

  • All versionsaffected

Medtronic 24952 MyCareLink Monitor

Default version status: unaffected

  • All versionsaffected

References