Skip to content
OpenAdvisories
Medium ICSMA-18-179-01 2 CVEs

Medtronic MyCareLink Patient Monitor

Published Jun 28, 2018 · Updated Jun 28, 2018

Vendor: Medtronic Product: 24950 MyCareLink Monitor Product: 24952 MyCareLink Monitor

Summary

If exploited, these vulnerabilities may allow privileged access to the monitor 's operating system. However, physical access to the MyCareLink monitor is required. Additionally, these vulnerabilities may allow a MyCareLink monitor, when operated within close physical proximity of an implantable cardiac device, to read and write arbitrary memory values of that device.

Vulnerabilities 2

  • Medium 6.4
    CVE-2018-8870

    Medtronic MyCareLink Patient Monitor Use of Hard-coded Password

    Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains a hard-coded operating system password. An attacker with physical access can remove the case of the device, connect to the debug port, and use the password to gain privileged access to t…

    Medtronic 24952 MyCareLink Monitor 24950 MyCareLink Monitor
  • Medium 6.2
    CVE-2018-8868

    Medtronic MyCareLink Patient Monitor Exposed Dangerous Method or Function

    Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains debug code meant to test the functionality of the monitor's communication interfaces, including the interface between the monitor and implantable cardiac device. An attacker with physica…

    Medtronic 24950 MyCareLink Monitor 24952 MyCareLink Monitor

Revision history

  1. #1

    ICSMA-18-179-01 Medtronic MyCareLink Patient Monitor

References