5.2
CVSSv2

CVE-2018-10596

Published: 03/07/2018 Updated: 09/10/2019
CVSS v2 Base Score: 5.2 | Impact Score: 6.4 | Exploitability Score: 5.1
CVSS v3 Base Score: 8 | Impact Score: 5.9 | Exploitability Score: 2.1
VMScore: 463
Vector: AV:A/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

Medtronic 2090 CareLink Programmer all versions The affected product uses a virtual private network connection to securely download updates. The product does not verify it is still connected to this virtual private network before downloading updates. An attacker with local network access to the programmer could influence these communications.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

medtronic 2090_carelink_programmer_firmware