GCVE - cpe:2.3:h:medtronic:24952_mycarelink_monitor:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:medtronic:24952_mycarelink_monitor:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Medtronic (`39ade870-5d3b-575a-9a52-512cca95c641`)
Product	24952 Mycarelink Monitor (`9d9f6b38-321e-5f83-81eb-43fbf15eb16a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-8870`	not_vulnerable	2026-06-08 05:12:06.627160	Medtronic MyCareLink Patient Monitor Use of Hard-coded Password MEDIUM (6.4) Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains a hard-coded operating system password. An attacker with physical access can remove the case of the device, connect to the debug port, and use the password to gain privileged access to the operating system. Published: 2018-07-02T18:00:00.000Z Updated: 2025-05-22T18:10:03.426Z Open on db.gcve.eu Reference links https://global.medtronic.com/xg-en/product-security/security-bulletins/mycarelink-6-28-18.html https://ics-cert.us-cert.gov/advisories/ICSMA-18-179-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-8868`	not_vulnerable	2026-06-08 05:12:06.626090	Medtronic MyCareLink Patient Monitor Exposed Dangerous Method or Function MEDIUM (6.2) Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains debug code meant to test the functionality of the monitor's communication interfaces, including the interface between the monitor and implantable cardiac device. An attacker with physical access to the device can exploit other vulnerabilities to access this debug functionality. This debug functionality provides the ability to read and write arbitrary memory values to implantable cardiac devices via inductive or short range wireless protocols. An attacker with close physical proximity to a target implantable cardiac device can use this debug functionality. Published: 2018-07-02T18:00:00.000Z Updated: 2025-05-22T18:14:07.710Z Open on db.gcve.eu Reference links https://global.medtronic.com/xg-en/product-security/security-bulletins/mycarelink-6-28-18.html https://ics-cert.us-cert.gov/advisories/ICSMA-18-179-01	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.