CVEvulnerability

CVE-2018-8870

6.4 MEDIUM Published 2018-07-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-07-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.4 MEDIUM — CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0 ([email protected])
6.8 MEDIUM — CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-259, CWE-798

Description

Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains a hard-coded operating system password. An attacker with physical access can remove the case of the device, connect to the debug port, and use the password to gain privileged access to the operating system.

Affected configurations

• medtronic 24950 mycarelink monitor firmware • medtronic 24952 mycarelink monitor firmware

Related

Weakness · CWE (2)

  • CWE-259 Use of Hard-coded Password weakness
  • CWE-798 Use of Hard-coded Credentials weakness

References