CVE-2018-8849

Published May 18, 2018

Last updated 3 days ago

Overview

Description
Medtronic N'Vision Clinician Programmer 8840 N'Vision Clinician Programmer, all versions, and 8870 N'Vision removable Application Card, all versions does not encrypt PII and PHI while at rest.
Source
ics-cert@hq.dhs.gov
NVD status
Modified

Risk scores

CVSS 3.0

Type
Primary
Base score
4.6
Impact score
3.6
Exploitability score
0.9
Vector string
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity
MEDIUM

CVSS 2.0

Type
Primary
Base score
2.1
Impact score
2.9
Exploitability score
3.9
Vector string
AV:L/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

ics-cert@hq.dhs.gov
CWE-311
nvd@nist.gov
CWE-311

Social media

Hype score
Not currently trending

Configurations